defined set of critical design properties. Though not originally intended for
software security requirements engineering, SCR has been used effectively for
many years for specifying high assurance systems. Like secure software, such
system have requirements for integrity and availability as well as dependability