combination of techniques and scenarios sufficient to collectively determine
(to whatever level of assurance is desired) whether the software does indeed
exhibit the properties and behaviors listed above. The security test plan should
be included in the overall software test plan, and should define—