Level-driving security demand analysis method

Abstract

The invention belongs to the field of credible computing and relates to a level-driving security demand analysis method. The method comprises two aspects of establishing a level knowledge base and performing security demand analysis on a specific system. During development of a certain specific system, security function components selected according to threatens are screened according to a security demand level requirement of a user on the system; and a security demand analyzer describes a finally selected security function component as a security summary rule by taking a specific technology and a security strategy into consideration. The level-driving security demand analysis method is mainly applied to security demand analysis on software by using levels and a CC standard in a demand analysis stage, so that security flaws in the initial stage of software development can be reduced.

Description

technical field [0001] The invention belongs to the field of trusted computing, and is mainly used to analyze the security requirements of software by using grades and CC standards in the requirement analysis stage, so as to reduce the security loopholes in the early stage of software development. The invention provides support for the establishment of the credible demand standard system. Background technique [0002] Today, with the rapid development of computers, the security features of computer software are not only additional attributes of software, but also essential features. However, while the information industry makes more users feel convenient, it also leads to a large number of security risks. How to guarantee the service quality and service quality of the software has naturally become a major issue of concern to the majority of users. In this context, the importance of information security technology is self-evident, and the concept of trusted software and rel...

AI Technical Summary

Problems solved by technology

[0005] However, there are some problems in the process of security requirements analysis using CC: 1) The whole process requires the participation of security experts, especially in the process of security function selection, the quality of component selection directly affects the accuracy of software security requirements, This makes its use threshold relatively high, and most civilian systems will not be available; 2) The user's participation is too frequent, and interaction is required in the first three steps

Images