Automated code generation using analysis of design diagrams

A computer-implemented method performed by one or more computing devices, comprising:

• determining, by a diagram-to-code system, one or more security properties of a plurality of components associated with a software product, wherein relationships between the components are indicated in a software design diagram, and wherein at least a portion of the one or more security properties are determined using input to a user interface;
• determining, by the diagram-to-code system, a property graph representing a data layer of the plurality of components, wherein the property graph is determined based at least in part on analysis of the software design diagram and the one or more security properties;
• generating, by the diagram-to-code system, one or more secure code packages based at least in part on the software design diagram and the property graph, wherein the one or more secure code packages implement one or more security controls associated with the software product;
• and
• providing the one or more secure code packages to a developer, wherein the one or more secure code packages and additional program code from the developer are compiled into a compiled version of the software product, and wherein execution of the compiled software product mitigates one or more security vulnerabilities using the one or more security controls.

One or more non-transitory computer-readable storage media storing program instructions computer-executable on or across one or more processors to perform:

• determining, by a diagram-to-code system, one or more security properties of a plurality of components associated with an application, wherein the components and relationships between the components are indicated in a software design diagram, and wherein at least a portion of the one or more security properties are determined using input to a user interface;
• determining, by the diagram-to-code system, a property graph representing a data layer of the plurality of components, wherein the property graph is determined based at least in part on analysis of the software design diagram and the one or more security properties;
• generating, by the diagram-to-code system, one or more secure code packages based at least in part on the software design diagram and the property graph, wherein the one or more secure code packages implement one or more security controls associated with the application;
• and
• providing the one or more secure code packages to a developer, wherein the one or more secure code packages and additional program code from the developer are compiled into a compiled version of the application, wherein execution of the compiled version of the application mitigates one or more security vulnerabilities using the one or more security controls.