From Requirements to Attack Trees: Grounded LLM Agents for Design-Time Security Review
Design-level security weaknesses can arise from requirements, trust assumptions, missing controls, and data flows before implementation begins. Existing security practices often identify these issues after code is written. We present a multi-agent LLM framework for design-time security analysis from product requirement...
Akash Iyer, Taha Demirkan, Keerthi Koneru et al.
· 0 citations