events (attack patterns) that may be combined to cause a security compromise
(see Section 3.2 on threats to software). Attack and threat trees and attack
graphs provide alternative formats for capturing abuse case and misuse case
information. The holistic view provided by the trees and graphs also clarifies the