gain access to behaviors or resources that are outside of the software's intended control sphere
for that actor.
CONSEQUENCE: a behavior that violates the intended security policy.
WEAKNESS: a type of behavior that has the potential for allowing an attacker to violate the