Taha Demirkan

From Requirements to Attack Trees: Grounded LLM Agents for Design-Time Security Review

Design-level security weaknesses can arise from requirements, trust assumptions, missing controls, and data flows before implementation begins. Existing security practices often identify these issues after code is written. We present a multi-agent LLM framework for design-time security analysis from product requirement...