Patent ID: 8161525

Claim:
A computer implemented method of designing security for an information technology system which includes insecure components, the steps of the method comprising: documenting a solution environment and a plurality of security assumptions using one or more computer-implemented design tools; identifying, documenting and ranking one or more security threats to the solution environment; determining one or more security properties of a single integrated security system comprising a plurality of interconnected and interdependent security subsystems that, inter alia, manage audits, integrity, and information flow control, and the subsystem that manages integrity further comprises: a confirming element to confirm hardware and software components and data integrity; a monitoring element to monitor hardware and software component reliability; a verification element to verify correct operation; a separation element to ensure domain separation; a first clock to maintain trusted time; and a second clock to provide current trusted time; assigning functional details of the plurality of interconnected and interdependent security subsystems to an infrastructure, a plurality of components, and a plurality of operations of the solution environment; enumerating security requirements for each of the infrastructure, components and operations of the solution environment; developing integrity assurance requirements for the solution environment; documenting the security requirements and the rationale for the solution environment; and providing and documenting guidance for selection of the plurality of components, for integrating the plurality of interconnected and interdependent security subsystems, and operating the solution environment.