## 5 Evaluation Approach
### Discussion of Results  
In the previous section, a realistic scenario has been presented where several feature models represent a security context in which three product configurations have been analysed. The analysis has been carried out in twofold: (1) a first analysis in which the number of features, relations, validation of the model and the number of products were determined; (2) a second analysis in which particular configurations were validated and diagnosed. The aim of the analysis is to provide a perspective in the domain of the configuration of products in the security context and to help the involved practitioners in the task of the verification of policies and configurations according to the context. The usefulness of the results obtained with CyberSPL can be observed from different points of views:  
* For Business and security managers, CyberSPL enables improving the task of verification and analysis of cybersecurity policies due to the automatic analysis. Moreover, the use of catalogues and historical records of models enables doing a more flexible, effective, adaptable, and easy-to-maintain security contexts for organisations. The models can be shared and reused in multiple scenarios according to the necessity of the organisations. For instance, the models can be customised and enriched with attributes to indicate which risk level certain features have according to the organisation expectancy. * For Business and security provisioners, CyberSPL enables automatically verifying and diagnosing whether the configurations comply with established policies and contexts. Moreover, CyberSPL \begin{table}
\begin{tabular}{c l l l} \hline \hline \# & **Configuration** & **Result** & **Diagnosis** \\ \hline \multirow{6}{*}{1} & Android, ACCESSIBILITY, & \multirow{6}{*}{**Valid**} & \multirow{6}{*}{-} \\  & ACCESSIBIILITY\_ENABLED, & & \\  & ENABLED\_ACCESSIBILITY\_SERVICES, & & \\  & LOCATION, LOCATION\_MODE\_OFF, TTS, & & \\  & TTS\_DEFAULT\_PITCH, TTS\_DEFAULT\_RATE, & & \\  & TTS\_ENABLED\_PLUCHS, & & \\  & TTS\_DEFAULT\_SYNTH & & \\ \hline \multirow{6}{*}{2} & Android, INPUT\_METHOD, & \multirow{6}{*}{**Valid**} & \multirow{6}{*}{-} \\  & ENABLED\_INPUT\_METHOD, & & \\  & SELECTED\_INPUT\_METHOD, & & \\  & INPUT\_METHOD\_SUEACTOR\_VISIBILITY, & & \\  & MISCELLANEOUS, RTT\_CALLING\_MODE, & & \\  & ANDROID\_ID, SKIP\_FIRST\_USE\_HINTS, & & \\  & TOUCH\_EXPLORATION\_ENABLEED & & \\ \hline \multirow{6}{*}{3} & Android, ACCESSIBILITY, & \multirow{6}{*}{**No valid**} & \multirow{6}{*}{**Select**: LOCATION **Deselect**: LOCATION **\_MODE\_OFF} \\  & ACCESSIBILITY\_SERVICES, & & LOCATION\_MODE\_OFF \\  & LOCATION\_MODE, FF\_ITS, & & \\  & TTS\_DEFAULT\_PITCH, TTS\_DEFAULT\_RATE & & \\ \hline \multirow{6}{*}{4} & Android, INPUT\_METHOD, & \multirow{6}{*}{**No valid**} & \multirow{6}{*}{**Select**: DEFAULT\_INPUT\_METHOD, \\  & MISCELLANEOUS, RTT\_CALLING\_MODE, & & \\  & ANDROID\_ID, SKIP\_FIRST\_USE\_HINTS, & & \\  & TOUCH\_EXPLORATION\_ENABLEED & & \\ \hline \multirow{6}{*}{5} & Android, ACCESSIBILITY, & \multirow{6}{*}{**No valid**} & \multirow{6}{*}{**Select**: ENABLED\_ACCESSIBILITY\_SERVICES, \\  & ACCESSIBILITY\_SPEAK\_PASSWORD, & & ACCESSIBILITY\_DISPLAY\_VERSION\_ENABLEED, \\  & LOCATION, LOCATION\_MODE\_OFF, & & ACCESSIBILITY\_ENABLEED **Deselect**: ACCESSIBILITY\_SPEAK\_PASSWORD, \\  & INPUT\_METHOD, SELECTOR\_VISIBILITY & & ACCESSIBILITY \\ \hline \multirow{6}{*}{6} & Android, INPUT\_METHOD, & \multirow{6}{*}{**No valid**} & \multirow{6}{*}{**Select**: TTS\_ENABLEED\_PLUCHS, \\  & DEFAULT\_INPUT\_METHOD, & & \\  & ENABLED\_INPUT\_METHODS, TTS, & & \\  & TTS\_DEFAULT\_COUNTRY & & TTS\_DEFAULT\_PITCH **Deselect**: \\ \hline \hline \end{tabular}
\end{table} 
Table 7: Diagnosis of _Android_ model configurations. can be useful to obtain valid blueprints to secure and configure products or systems according to the organisation policies. The advantage of CyberSPL is to provide a framework where users all over the world can develop, update, and share their models.