discovered during the analysis and testing. The experiences of software security
analysts and testers mirror those of their counterparts in the software safety
community: a far greater number of the most significant security faults in
software originate in the inadequate specification of its requirements and