studies. As of April 2007, the next stage of SafSec evaluation, which involves
applying the methodology on a system under development, was still underway.
It would seem that so far, assurance case proponents have based their
expectation of the effectiveness of security assurance cases on an extrapolation