osate / osate2

Open Source AADL2 Tool Environment
http://osate.org
Eclipse Public License 2.0
35 stars 8 forks source link

Add security and confidentiality analysis #2883

Open TillFleisch opened 6 months ago

TillFleisch commented 6 months ago

This pull request adds the security and confidentiality analysis as presented in 'Modeling and Validating Security and Confidentiality in System Architectures' DOI: 10.1184/R1/13659911.

All rules and additional checks mentioned in the report are implemented to the best of my knowledge. As stated in the report section 4.2.1 (subprogram calls):

This rule is presently of no practical importance because the current AADL tool sets do not actually instantiate call sequences.

Therefore Rule 4, is not included in this implementation.

I've included some examples for getting started/show-casing and testing the functionality. A proper unit test has not been written.

Additionally, I've looked at how other analyses are added to the project and used those as a guideline for adding this analysis. I managed to successfully run build.local on a Windows machine resulting in an executable containing the newly added features.