Patent ID: 8161525
Filing Date: 2012-04-17
Classification: G06F

Abstract:
1. A computer implemented method of designing security for an information technology system which includes insecure components, the steps of the method comprising: documenting a solution environment and a plurality of security assumptions using one or more computer-implemented design tools; identifying, documenting and ranking one or more security threats to the solution environment; determining one or more security properties of a single integrated security system comprising a plurality of interconnected and interdependent security subsystems that, inter alia, manage audits, integrity, and information flow control, and assigning functional details of the plurality of interconnected and interdependent security subsystems to an infrastructure, a plurality of components, and a plurality of operations of the solution environment; enumerating security requirements for each of the infrastructure, components and operations of the solution environment; developing integrity assurance requirements for the solution environment; documenting the security requirements and the rationale for the solution environment; and providing and documenting guidance for selection of the plurality of components, for integrating the plurality of interconnected and interdependent security subsystems, and operating the solution environment.