TRADES Tool

TRADES Tool is a model-based threat and risk assessment tool for the design of systems, developed by Israel Aerospace Industries and other contributors. It is based on the TRADES methodology (see [1],[2]).

Check the releases section for the most up-to-date version of TRADES Tool as a stand-alone modeling workbench.

Documentation is available at the respective folder.

[1] Shaked, A. (2023). A model-based methodology to support systems security design and assessment. Journal of Industrial Information Integration, 100465.https://doi.org/10.1016/j.jii.2023.100465

[2] Shaked, A. and Reich, Y. (2021). Model-based Threat and Risk Assessment for Systems Design. In Proceedings of the 7th International Conference on Information Systems Security and Privacy - ICISSP, ISBN 978-989-758-491-6; ISSN 2184-4356, pages 331-338. DOI: 10.5220/0010187203310338https:// scitepress.org/Papers/2021/101872/101872.pdf

How to set up an environment

Java

The project is develop using Java 11. So you need to have a compliant JRE/JDK installed and set up in your eclipse environment.

Tooling

Eclipse

Download the Eclipse version (at least 2020-06 to ease the installation of other tools).

Install the following components (some might be already be installed) from the main repository (http://download.eclipse.org/releases/2020-06):

• Accelo
• Ecore Diagram Editor (SDK)
• EMF - Eclipse Modeling Framework SDK
• Graphical Modeling Framework (GMF) Notation SDK
• Graphical Modeling Framework (GMF) Runtime SDK
• XText Complete SDK
• Xtend IDE
• Eclipse Java Development Tools (JDT)
• Plug-in Development Environment (PDE)

From other update sites:

• Sirius Specifier Environement -https://download.eclipse.org/sirius/updates/stable/6.5.0-S20210326-125830/2020-06/
• Target platform DSL -http://download.eclipse.org/cbi/tpd/3.0.0-SNAPSHOT/
• EMF Loophole -http://mbarbero.github.io/emf-loophole/
• Asciidoctor Editor - Market placehttps://marketplace.eclipse.org/content/asciidoctor-editor

Java

The project is developed using Java 11. So you need to have a compliant JRE/JDK installed and set up in your eclipse environment.

Maven

You need an installation of Maven. To avoid any problem we recommend a version >= 3.6.3 and that the java version used by Maven to be 11 or above.

Set up

Build and download dependencies

Beforeimporting the projects in an Eclipse workspace follow the instruction from/dsm.oscal.ext/readme.adoc. Some of the required libraries arenot yetavailable in Maven central and need to be built locally.

Then, runmvn clean compilein/releng/dsm.TRADES.parentfolder. This command will automatically import/download the required dependencies in way that eclipse bundles can use them.

Set up the workspace

• Set up a Java 11 jre/jdk in eclipse
• Set up eclipse compiler to Java 11
• Import all projects
• Load the target plaform/dsm.TRADES.parent/tp/dev.target

At this point all projects should compile.

Run

Create anEclipse Applicationrun configuration and select the productdsm.TRADES.branding.product

How to build

Runmvn clean verifyin/releng/dsm.TRADES.parent.