A Risk Screening System by Network Diagram Recognition for Information Security Audit

We address risk screening support for the information security audit. In audit planning, the auditor has limited time to collect information and discuss risks with the company to be audited. The efficient way of identifying risk correctly within the limited time to improve the quality of the information security audit. Focusing on a network diagram that is commonly used for risk identification, we propose a risk screening system by network diagram recognition. The proposed system captures a picture of the network diagram by a camera, and stores the picture in volatile memory. The content of the network diagram on the picture is recognized by technologies of computer vision and saved as a XML file. Applying risk identification rules given by the auditor to the recognized network diagram, the proposed system identifies risks on the network diagram.