Method for the automatic analysis of security requirements of information technology system

This invention concerns a method for the automatic analysis of security requirements in information technology systems. To this end, it proposes an automatic analysis process, implemented on a processor, and which allows: taking account of all security aspects, both organisational and technical, int...

Full description

Saved in:
Bibliographic Details
Main Authors LECOMTE CHRISTELLE, LOISEAUX CLAIRE, LE METAYER DANIEL
Format Patent
LanguageEnglish
Published 22.12.2005
Edition7
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:This invention concerns a method for the automatic analysis of security requirements in information technology systems. To this end, it proposes an automatic analysis process, implemented on a processor, and which allows: taking account of all security aspects, both organisational and technical, interacting with the users (security experts, decision makers, etc.) and synthesizing relevant information which can then be easily compared with the actual situation, systematically checking security information for completeness and consistency in order to detect potential weaknesses of the system (or future system). The method according to the invention enables the description and comparison of different structured views of the information. This information structuring principle meets requirements which are increasingly difficult to satisfy by human reasoning, because of the growing complexity of information technology systems and the vast increase in volumes of parameters and information to be considered.
Bibliography:Application Number: US20040872233