because of an inadequate understanding by most requirements
engineers of security in general, and security as a property in particular.
u The selection of security requirements is inconsistent, with the
majority being functional requirements. Across those functional