attacker could cause harm in the service provided by the use case in
focus; details of such attacks may be determined later. Each of these
modes of attacks becomes a candidate misuse case.
The goal is to identify security threats against each of the functions,