Application Development Assistance System for Security Function Placement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software development technologies lack effective security measures, particularly in application development using flow diagrams, as they do not adequately consider 'exploitability scores' and prioritize security, leading to increased development system loads and suboptimal security implementations.
Innovation Solution
An application development assistance system and method that analyzes application description files to determine data importance levels and module exploitability scores, strategically assigning security functions based on these assessments to ensure optimal security measures are implemented where needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security measures are added to application development using flow diagrams, then security reliability is improved, but device complexity increases
Solution Approach 1:
The system performs preliminary security analysis during the application development phase by evaluating exploitability scores and data importance levels before the application is deployed. Security functions are automatically inserted into the flow diagram at critical positions identified during this preliminary assessment, preventing security vulnerabilities rather than adding complex security layers after development.
Solution Approach 2:
Instead of applying uniform security measures throughout the entire application, the system assigns security functions selectively to specific modules based on their individual exploitability scores and the importance levels of data they handle. This localized approach ensures security is enhanced only where needed, avoiding unnecessary complexity in low-risk areas.
2Reliability
If security functions are strategically assigned based on exploitability scores and data importance levels, then security reliability is improved, but productivity decreases
Solution Approach 1:
The system automatically evaluates exploitability scores, determines data importance levels, and assigns security functions without requiring manual security expert intervention. The flow diagram itself serves as the analysis target and the security configuration output, allowing the development system to self-assess and self-secure, thereby maintaining development efficiency while improving security reliability.
Solution Approach 2:
The security analysis system integrates multiple functions into a single automated process: it parses flow diagrams, evaluates exploitability, assesses data importance, determines security requirements, and generates security configurations all in one pass. This multi-functional approach avoids multiple separate analysis steps that would reduce productivity.
3Reliability
If exploitability scores and data importance levels are evaluated for each module, then security reliability is improved, but measurement precision requirements increase
Solution Approach 1:
The system replaces manual security assessment with automated computational evaluation of exploitability scores and data importance levels. By using algorithmic analysis of the flow diagram structure and data flow patterns, the system achieves consistent and reproducible security evaluations without relying on subjective human judgment, thereby improving reliability while managing precision requirements through systematic computation.
Data Source
AI summary
An application development assistance system in which optimal security measures can be taken at positions in need of security measures under an application development environment using a flow diagram analyzes an input application description file and outputs application data information and module information. A data importance level judgment unit decides importance levels of data exchanged between modules on the basis of the application data information. A module exploitability judgment unit decides an exploitability score of each module on the basis of the module information and exploitability information read out from a module exploitability database; and a security function disposal position judgment unit decides disposal positions of security functions on the basis of data importance level information decided by the data importance level judgment unit, the exploitability score of each module decided by the module exploitability judgment unit, and security measure information read out from a security measure information database.