requirement and corresponding test scenario for the software. Much of the
work in building misuse cases is therefore in developing requirements for
security functionality. The analysis technique, however, provides a way to elicit
nonfunctional requirements for protecting the software itself.