Patent ID: 7832007

Claim:
A non-transitory computer readable medium embodying instructions executable by a processor to perform a method of managing and mitigating security risks, comprising: creating a description of a plurality of available processing stations and primal entities, wherein the description comprises at least one of security properties, properties specific to describing content of the primal entities and a functionality of the available processing stations; receiving a description of product requirements comprising a definition of a maximum accepted security risk level; receiving a system of security labels specifying respective object security labels assigned to the primal entities and respective subject security labels assigned to the available processing stations, wherein the available processing stations cannot accept ones of the primal entities having a higher object security label than the subject security label of the respective available processing stations; creating a network using the description of the available processing stations, the description of the primal entities and the description of product requirements constrained by the system of security labels, comprising a selection of the available processing stations, a selection of the primal entities, a plurality of interconnections between selected processing stations and a plurality of interconnections between selected primal entities and the selected processing stations; and processing entities in the network according to a development plan created pursuant to the description of the available processing stations, the description of the primal entities and the description of product requirements, wherein the development plan comprises instructions for producing a product having an overall security risk level below a predefined value.