u Define Automation Requirement—capture business security requirements
from security policy
u Detail Software Requirements—refine security requirements.
130 Software Security Assurance State-of-the-Art Report (SOAR)