as crosscutting threat descriptions, which then aid in the composition of
these requirements with the system’s functional requirements; the resulting
specification defines a set of constraints on the functional requirements. These
constraints are the “security requirements.” Haley’s work is in response to what