requirements for software security are never specified. It is also a widely accepted
rule that negative and nonfunctional requirements, because they are not
“testable” or “actionable,” should not be documented. The problem is, to capture
requirements that will result in secure software, the requirements analyst must