extensions to the highly popular and successful RUP methodology. The
security extensions are aimed at adding and integrating activities, roles, and
artifacts to RUP for capturing, modeling, and documenting the threats to and
security requirements of a software system, and to ensure that those security