or “anti-patterns,” defined in terms of avoiding a vulnerability that would
prevent the system from satisfying its other, nonsecurity requirements.
This profusion of definitions of security requirement makes it difficult to
determine which requirements engineering approach is best suited for a