Design for securability - Applying engineering principles to the design of security architectures

Design for securability is an approach to obtain distributed information systems possible to secure during operation. To achieve this, three steps have to be supported in the design of these distributed systems. Firstly, the interactions and relations between the system and its environment have to be captured. Secondly, a set of security requirements on the system has to be formulated. Thirdly, the set of requirements has to be implemented in the system. This position paper focus on the third step which requires system models and design methods and tools.