Trade-off Analysis between Security Policies for Java Mobile Codes and Requirements for Java Application

We propose a method for analyzing trade-off between security polices for Java mobile codes and requirements for Java application. We assume that mobile codes are downloaded from different sites, they are used in an application on a site, and their functions are restricted by security polices on the site. We clarify which functions can be performed under the policies on the site using our tool. We also charify which functions are needed so as to meet the requirements for the application by goal oriented requirements analysis(GORA). By comparing functions derived from the policies and functions from the requirments, we can find conflicts between the policies and the requirments, and also find vagueness of the requirements. By using our tool and GOAR again, we can decide which policies should be modified so as to meet the requirments. We can also decide which requirements should be abandoned so as to meet policies which can not be changed.