Automated Security Analysis Apparatus for Data Flow Diagrams
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security checks in computer systems require manual comparison of data flow diagrams with analysis rules, which is labor-intensive and difficult to automate due to generic rule descriptions applicable to various systems and use cases.
Innovation Solution
A security analysis apparatus and method that includes a determination unit to search for information in data flow diagrams using search queries corresponding to analysis rules, determining the relationship between the data flow diagrams and the rules, thereby enabling automated security checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual comparison of data flow diagrams with analysis rules is performed, then security check accuracy is maintained, but administrative burden and time consumption increase significantly
Solution Approach 1:
The patent replaces manual mechanical comparison processes with an automated computer-based system. The determination unit automatically searches data flow diagrams using search queries derived from analysis rules, eliminating the need for manual review while maintaining security check accuracy through systematic computational comparison.
Solution Approach 2:
The system enables self-service security checking by automatically executing the analysis process. The determination unit independently searches for information in data flow diagrams, evaluates compliance with analysis rules, and generates results without requiring continuous human intervention, thereby reducing administrative burden while maintaining reliability.
2Adaptability or versatility
If analysis rules are described in generic manner for broad applicability, then adaptability to various systems is improved, but automation difficulty increases
Solution Approach 1:
The patent introduces search queries as intermediary elements that bridge generic analysis rules and specific data flow diagrams. The determination unit transforms analysis rules into executable search queries, enabling automated processing while preserving the generic applicability of the rules across different system configurations and use cases.
Solution Approach 2:
The system handles parameter variations by maintaining analysis rules in a generic form while dynamically adjusting search queries based on specific data flow diagram contents. This allows the same generic rules to be applied across different systems through parameterized search operations, achieving both broad adaptability and specific automation.
3Productivity
If automated search and determination process is implemented, then productivity and efficiency are improved, but system complexity increases
Solution Approach 1:
The patent segments the security check process into distinct functional components: the determination unit performs searching operations using search queries, separately handles information retrieval from data flow diagrams, and independently executes compliance determination. This segmentation enables automated high-efficiency processing while keeping each component's complexity manageable through modular design.
Data Source
AI summary
A security analysis apparatus includes a determination unit. The determination unit searches for information described in a data flow diagram of a computer system to be analyzed, using a search query corresponding to an analysis rule for use in analysis, and determines a relationship between the data flow diagram and the analysis rule based on retrieved information.