Patent ID: 8484714

Claim:
A method for generating system-specific security-definitions for a plurality of heterogeneous subsystems by using a computing system that includes at least one processor, the system-specific security-definitions associated with respective subsystems of the plurality of heterogeneous subsystems, the plurality of heterogeneous subsystems including a first heterogeneous subsystem, the method comprising: storing a plurality of natural-language security-definitions in a rule-repository that is stored in a storage medium; storing a plurality of machine-readable security-definitions in the rule-repository stored on the storage medium, the plurality of machine-readable security-definitions including a first machine-readable security-definition; storing, in the rule-repository stored on the storage medium, a first mapping of each one of the plurality of natural-language security-definitions onto at least one of the plurality of machine-readable security-definitions; storing, in the rule-repository stored on the storage medium, a second mapping that associates the first machine-readable security-definition to an indication of a first system-specific security-definition; associating a respective rule-converter to each one of the plurality of heterogeneous subsystems; generating, via the computing system, the first system-specific security-definition for the first heterogeneous subsystem from at least the first machine-readable security-definition by using the respective rule-converter associated with the first heterogeneous subsystem, wherein the generating is based on the second mapping, storing a new system-specific security-definition in the rule-repository; and generating, via the computing system, a second machine-readable security-definition from the new system-specific security-definition by the respective rule-converter according to the second mapping.