that defines an abstract language for modeling threats such as buffer
overflow exploits, as well as associated “treatments” (countermeasures)
Software Security Assurance State-of-the-Art Report (SOAR) 165
Section 5 SDLC Processes and Methods and the Security of Software