A Tool for System Security Design Verification based on Security Patterns

Information assets are important and influence the organization business’s operation and success. If these assets are leaked or accessed by unauthorized individuals, it can lead to significant damage or a loss of trust. Therefore, providing a suitable method for verifying and securing information assets is essential. This research focuses on the design model verification of the system security designed by the system security designer (SSD). The UML class diagrams are created based on Security patterns (SPs) and industrial practical considerations and used as a structural system security design reference model (SSDRM). The research scope of SPs includes Enterprise Security and Risk Management, Identification and Authentication, and Access Control Model Patterns. The verification mechanism between the two class diagrams, one from class diagram designed by SSD and one from SSDRM, consists of two algorithms: (1) an algorithm for checking the completeness of the class components, (2) an algorithm for checking the relationships between classes. In addition, the software tool was developed to support the class diagrams verification. The results of the tool application are the missing class components. In addition, the recommendation is attached with the appropriate explanation. This helps SSD reinforce their understanding of security concepts and design. The proposed tool was tested on a case study, Patient Information Management System (PIMS), to validate its effectiveness in enhancing system security design verification.