for security functionality. In other cases, it refers to “constraints” on
functionality. In yet other cases, it pertains to the need for functionality
to operate consistent with a governing security policy. In addition,
security requirements are increasingly being seen as “anti-requirements”