From Requirements to Attack Trees: Grounded LLM Agents for Design-Time Security Review

Excerpt

arXiv:2610.03820v1 Announce Type: cross Abstract: Design-level security weaknesses can arise from requirements, trust assumptions, missing controls, and data flows before implementation begins. Existing security practices often identify these issues after code is written. We present a multi-agent LLM framework for design-time security analysis from product requirement documents and architecture diagrams. The proposed framework parses architecture diagrams into graph representations, generates mi