information it processes, such as unauthorized access, modification, denial of
service, disclosure, etc. They are also known as security service requirements.
The second category of requirements directly affects the likelihood that
the software itself will be secure. These are the nonfunctional—or property—