Patent ID: 8276114

Claim:
A computer-implemented method for integrating requirements driven security code into an application system, the method comprising: identifying one or more security requirements; assigning unique marker annotations to each of said one or more identified security requirements; performing a first mapping of said one or more identified security requirements to aspects that implement the identified one or more security requirements; marking each of said aspects with a unique marker annotation that uniquely matches a corresponding security requirement that the aspect implements in accordance with said first mapping; performing a second mapping of each of said aspects to an application code base comprising marking code in the application code base using the unique marker annotations at insertion points in the application code base where each of said aspects are to be woven; inserting said unique marker annotations into said application code base based on said second mapping; and weaving said aspects into said application code base at said insertion points identified by said unique marker annotations to provide a precise and traceable mapping between said one or more security requirements and said application code base.