soft goals, including security. This procedure determines the degree to which
a goal is either satisfied or denied by lower-level goals or requirements. The
general idea is to propagate satisfied links from the bottom-up, from lower-level
nodes (i.e., requirements) to higher-level nodes (i.e., goals).