T-MAP uses a graph analysis to define evaluate and attack scenario. The
attack is based on Bruce Schneier’s “attack path” approach [190] and incorporates
150 Software Security Assurance State-of-the-Art Report (SOAR)
Section 5 SDLC Processes and Methods and the Security of Software