systems through assurance measures are left out.” Wilander and Gustavsson
elaborate on this observation by identifying some key defects they have
observed in the majority of security requirements they studied:
u Most security requirements are either absent or poorly specified