modeling) methodologies have been developed and used within the software
development industry. These methodologies are described in Section 5.2.3.1.
In addition to threat modeling and other security risk analysis
methodologies, testing tools are available for developers of custom-built