Patent ID: 8495744

Claim:
An article of manufacture comprising non-transitory computer-readable medium having computer readable instructions stored thereon for execution by a processor to: receive a plurality of security requirements corresponding to a computer system; query one or more security pattern libraries for a plurality of fragmentary security solutions, wherein each fragmentary security solution of the plurality of fragmentary security solutions satisfies at least one security requirement of the plurality of security requirements corresponding to the computer system; evaluate a risk of conflict between the plurality of fragmentary security solutions, wherein evaluating the risk of conflict includes: creating a weighted matrix with rows and columns corresponding to the plurality of fragmentary security solutions, setting a weighted matrix element to a first value when a first fragmentary security solution corresponding to a row of the weighted matrix element and a second fragmentary security solution corresponding to a column of the weighted matrix element are independent from each other, setting the weighted matrix element to a second value when the first fragmentary security solution corresponding to the row and the second fragmentary security solution corresponding to the column share common configuration data, setting the weighted matrix element to a third value when the first fragmentary security solution corresponding to the row is a sub-solution or a super-solution of the second fragmentary security solution corresponding to the column, and rating a risk of conflict at configuration level for a pair of the plurality of fragmentary security solutions according to a value that is set for the weighted matrix element corresponding to the pair of the plurality of fragmentary security solutions; and integrate at least two fragmentary security solutions of the plurality of fragmentary security solutions to generate a composite security solution for the computer system that satisfies the plurality of security requirements, wherein the at least two fragmentary security solutions are selected based on the evaluated risk of conflict.