Method for enabling automatic evaluation of a current software security status and data processing device

摘要

The invention relates to a method for enabling an evaluation of a current software security status and a corresponding data processing device. For this purpose, a directed graph is generated for a software system, which represents the dependencies between the software parts assigned to the nodes. In each node, a security attribute indicates the current security status of the respective assigned software part. The respective security attribute is specified for the leaves of the graph. In addition, rules are specified which specify how the security attributes of the respective hierarchically subordinate nodes are to be combined with one another along a structure of the graph for the other nodes in order to determine their respective security attribute.