Software Security,” CrossTalk: The Journal of Defense Software Engineering 20, no. 3 (March 2007):
188 Paco Hope and Gary McGraw (Cigital, Inc.), and Annie I. Antón (North Carolina State University), “Misuse
and Abuse Cases: Getting Past the Positive,” IEEE Security and Privacy (May-June 2004): 32–34.
189 Nancy R. Mead (CMU SEI), Requirements Elicitation Introduction (Washington, DC: US CERT,