(and supporting tools) to software components (and development projects).
The following are the most popular, well-established of the system security
risk assessment techniques. All of these are have been used in software
security risk assessments.