then analyzed and converted to actionable, positive, functionalrequirements.
For example, the requirement that “Software must not be susceptible to buffer
Software Security Assurance State-of-the-Art Report (SOAR) 141
Section 5 SDLC Processes and Methods and the Security of Software