development by a team of researchers from Pennsylvania State
University, Polytechnic University, and SAP as a “a means to compare
the security of different applications, and the basis for assessing if an
application meets a set of prescribed security requirements.” The