Patent ID: 7251831

Claim:
A methodology framework for analyzing technology system including a plurality of components and for designing security into that system, the framework comprising: a first system which identifies the security threats for the solution; a second system having a security reference model comprising a plurality of interrelated and interdependent security subsystems, the security subsystems further comprising an audit subsystem, an integrity subsystem, and an information flow control subsystem, the second system to determine security properties and functions of the information technology system in terms of the security subsystems; a third system which is coupled to the second system and which allocates security properties to the components of the information technology system based upon the selected functions which are derived from the nature and number of the security subsystems within the information technology system; a fourth system which is coupled to the third system for allocating the security properties to the components of the information technology system and which identifies functional requirements for the components, in terms of the Common Criteria, in order to comply with the security properties of the component allocated by the third system; and a fifth system which is coupled to the fourth system and which documents the requirements for the security components for the information technology system.