itemis SECURE documentation
itemis SECURE is a model-based tool for threat analysis and risk assessment (TARA) of technical systems, built for full compliance with ISO/SAE 21434 and UN Regulation No. 155.
Where to start
- New to the tool? Start with itemis SECURE insight.
- Installing it for the first time? See installation and licensing.
- Want to model something right away? Create your first project.
- Finding your way around? See the user interface and the keyboard shortcuts.
- Running an analysis? Work through the threat analysis and risk assessment, from the item definition to risk determination and treatment.
- Rating impact, feasibility and risk? See the configuration aspects of the method configuration.
- Deriving a security concept? See the security concept phase.
- Reporting results? See report generation.
The catalogs hold the reusable threats, controls and technologies, import and export covers exchanging data with other tools, and project migration explains how to move a project to a newer version of itemis SECURE.
Wondering what changed in a given version? The release notes cover every release, newest first.
The user guide
itemis SECURE insight
itemis SECURE is a model-based software solution for threat analyses and risk assessments (TARA) of technical systems. It supports your threat analysis and risk assessment…
First Steps
Welcome to itemis SECURE! In this chapter you'll learn how to get started with itemis SECURE. This includes installation, general introduction, and creating your initial project.
Tool Overview
This section explains how to use this tool to conduct your TARA which is an engineering methodology to identify, prioritize, and respond to cyber threats through the application…
Method Configuration
The Method Configuration serves as a foundation for all calculations taking place in itemis SECURE. It contains the domain-specific sets of feasibility options, impact options…
Threat Analysis and Risk Assessment
This chapter provides information for each process step, that is needed as part of a Threat Analysis and Risk Assessment (TARA). The following subsections correspond to these core…
Security Concept Phase
The Concept Phase involves consideration of vehicle level functionality, as implemented in items. The item definition forms the basis for the subsequent activities.
Report Generation
itemis SECURE reports can be created in DOCX and PDF formats. To generate and display the corresponding document, right-click on the chunk in the project explorer, and select…
Catalogs
Catalogs in itemis SECURE consist of a Threats Catalog, a Controls Catalog, and a Technologies Catalog. Each catalog features pre-evaluated elements to be re-used across your…
Import and Export
The "Import and Export" chapter covers everything you need to know about transferring data to and from itemis SECURE. Understanding the importance of integrating existing models…
Advanced Features
Some advanced features might not be needed in everyday use of itemis SECURE. These are covered in this chapter and includes scripting capabilities, details about the XSAM exchange…
Project Migration
Project migration is the general process of keeping your TARA projects compatible with the releases of itemis SECURE. This is mostly a mostly-automated process that itemis SECURE…