Patent ID: 8132259

Claim:
A method for security planning with soft security constraints, comprising: receiving security-related requirements and a desired output; generating a plurality of different workflows according to the security-related requirements and desired output, wherein a workflow satisfies soft security constraints and includes a plurality of components, the components comprising software resident on a plurality of computers connected over a network, the components configured to produce the desired output; presenting the workflows and a risk estimate of each workflow's execution to a user; and receiving a selection from the user, wherein the selection identifies a workflow to be executed and the selection is not precluded by any level of the risk estimates, wherein the method is performed using a processor, wherein at least one of the components is described by an action and the security-related requirements comprise a policy constraint in the action description of the at least one component, wherein generating the workflows according to the security-related requirements, comprises translating the security-related requirements into Fuzzy multi-level security (MLS) access class labels and translating the Fuzzy MLS access class labels into Stream Processing Planning Language (SPPL) or Planning Domain Definition Language (PDDL), and wherein several MLS labels with different associated risk values are generated for a Fuzzy MLS access class label, and translated to a single planning problem represented in SPPL or PDDL.