involves determining social and technical vulnerabilities, assessing costs
and likelihood of attacks, and the selection of countermeasures.
The final output of the design sessions is a design document detailing the
architecture of the system together with all the countermeasures that have been