performance, usability, etc. As Charles Haley et al. [79] have observed,
“Security requirements often con ict with each other, as well as with
other requirements,” and indeed their research, along with that of
several others, focuses on the combination (or composition) of a