originate from the user’s misunderstanding of the software’s functionality and
constraints (such misunderstanding is often exacerbated by poorly designed user
interfaces, lack of input validation, etc.). Because “accidental attack patterns” have
human agency they cannot be termed“hazards” in the sense of “acts of God” or