3.2.3 How are Threats to Software Manifested?
Threats to software are manifested in two basic ways—
u Human attackers who target or exploit vulnerabilities
u Execution of malicious code embedded or inserted in the software.