susceptible to buffer overflows” could be mapped to functional requirements
for input validation and for use of only type-safe/memory-safe programming
languages. Some of the use case adaptations to abuse and misuse cases (see
Section 5.2.3.2.1) make this mapping step explicit.