PLANNING AND DESIGNING METHOD AND SUPPORTING TOOL FOR SECURITY SYSTEM

摘要

PROBLEM TO BE SOLVED: To systematically and consistently fix the contents of a text corresponding to the table of contents by dividing all the processes of planning and designing into six phases such as an evaluating object modeling, threat extraction, measure leading out to execute. SOLUTION: Evaluating object (TOE) modeling (phase I) clarifies basic elements by inclusion tree analysis and a communication line between basic elements to fix a basic element which should be evaluated. Threat extraction (phase II) extracts threats each evaluating element is estimated to suffer by executing 5W development. Measurement leading out (phase III) leads out a measure by fault tree analysis to lead out measures which should be executed. Security target establishment (phase IV) clarifies relation between the extracted threats and measures. Giving (phase V) of a common criterion(CC) function requirement gives a CC function requirement corresponding to a leading-out measure. Security function designing (phase VI) designs a security function meeting a CC function requirement by each evaluation element.