in the system. Some studies have suggested that AEGIS can take place over a
series of four design sessions between developers and stakeholders. Depending
on the level of security needed and experience of the developers, security
experts can assist with the identification of threats and selection/design of