Patent ID: 8955115
Filing Date: 2015-02-10
Classification: G06F,H04L

Abstract:
1. An apparatus for generating security checks, the apparatus comprising: at least one processor; a non-transitory computer-readable storage medium including instructions executable by the at least one processor, the instructions configured to implement, a model editor configured to obtain a source model for implementing an application solution within a system, the source model including an arrangement of a plurality of elements for implementing the application solution within the system; the model editor configured to annotate the source model including annotating at least one element of the plurality of elements with a security requirement associated with the at least one element, and annotating the at least one element with a countermeasure, the countermeasure information, the countermeasure being a configuration option for realizing the security requirement within the system, the countermeasure including a countermeasure type and at least one parameter corresponding to the countermeasure type, the model editor configured to store the annotated source model, the annotated source model providing links among the at least one element, the security requirement, and the countermeasure; and a code generation engine configured to obtain the annotated source model, and generate a security check for the countermeasure including selecting a security check template from a plurality of security check templates that corresponds to the countermeasure type and populating the selected security check with the at least one parameter, the security check template being an outline of the security check that is general to the countermeasure type, the security check being a script to check attributes of the system to verify that the countermeasure is enabled.