Formal methods can be used in the architecture phase—
u Specify architectures, including security aspects of an architectural
design
u Verify that an architecture satisfies the specification produced during