of requirements, architecture, and design specifications, which were discussed
in Sections 5.2 and 5.3.
Note: While the automated source code scanners and application vulnerability scanners described in Sections
5.5.2.1 and 5.5.2.2 are able to review very large programs in a short time and also to report metrics (e.g., how