Use Case Development Misuse and abuse cases
Trade Studies Identification of threats and attacks unique to the application
domain (such as web
142 Software Security Assurance State-of-the-Art Report (SOAR)