which has been the emphasis of previous academic research. More work may need to be done
with properties to support this.
Dowd et al's "Art of Software Security Assessment" touches on some of these concepts
in an introductory chapter, but it does not propose them as a formal framework. Our