Add security and confidentiality analysis #2883
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request adds the security and confidentiality analysis as presented in 'Modeling and Validating Security and
Confidentiality in System Architectures' DOI: 10.1184/R1/13659911.
All rules and additional checks mentioned in the report are implemented to the best of my knowledge.
As stated in the report section 4.2.1 (subprogram calls):
Therefore Rule 4, is not included in this implementation.
I've included some examples for getting started/show-casing and testing the functionality. A proper unit test has not been written.
Additionally, I've looked at how other analyses are added to the project and used those as a guideline for adding this analysis.
I managed to successfully run
build.local
on a Windows machine resulting in an executable containing the newly added features.