The National Aeronautics and Space Administration (NASA) Reducing
Software Security Risk (RSSR) program [291] sponsored by the NASA
Software IV&V Facility is working to define a formal analytical approach for
integrating security into existing and emerging practices for developing highquality software and systems. The RSSR seeks to address several problems