security and safety requirements through the use of anti-goals (the converse of
goals, such as availability and integrity). Anti-goals describe the vulnerabilities that
make satisfaction of the system’s stated goals impossible.The resulting security
requirements are expressed in terms of “avoiding” anti-goals in orderto eliminate