A supporting system for predicting vulnerabilities and their countermeasures of an information system during requirements analysis

我们开发了一种安全需求分析方法。在该方法中，基于待开发系统中资产和系统架构之间的依赖关系，系统地预测漏洞及其对策。当架构改变但系统功能不变时，我们可以重新检查漏洞及其对策。我们还开发了一个辅助工具，用于制定该方法。该工具由三个组件组成：建模编辑器，模型检查器和可视化工具。在该工具的帮助下，包括安全专家在内的利益相关者可以验证该方法的预测结果，因为该工具可以在我们原有的模型检查引擎的基础上自动推导出漏洞的候选者，并可视化推导出的结果。

We have developed a method for security requirements analysis. In the method, vulnerabilities and their countermeasures are systematically predicted on the basis of the dependencies among assets and a system architecture in a system to be developed. We can re-examine vulnerabilities and their countermeasures when the architecture is changed but system functionalities are not changed. We have also developed a supporting tool for enacting the method. The tool consists of three components: a modeling editor, a model checker and a visualizer. With the help of the tool, stakeholders including security experts can validate the predicted results of the method because the tool can automatically derive the candidates of vulnerabilities on the basis of our original model checking engine and visualize the derived results.