contrast, H. In and Barry Boehm have adapted theWin-Win quality management
framework [181] to include security requirements. C.L. Heitmeyer made similar
adaptations to NRL’s Software Cost Reduction (SCR) methodology. [182]
Charles Haley et al. [183] propose representing security requirements