Auto-Selection of Security Functional Components Based on Common Criteria

Abstract

With the development of software engineering, security problems have become more and more serious through all phases in software development life circle. This paper proposes an automatic method of selecting security functional components by mapping threats and components. Firstly, we extract the information of threats from the published documents of Protect Profiles. In order to defend these threats, we obtain security objectives from security functional class. Then, we consider security functional requirements based on security objectives. Finally, we extract security functional components from security requirements. We take a students’ course selection system as a working example and prove how our auto-selecting method can reduce the working capacity and improve work efficiency.