Misuse and abuse cases: getting past the positive
Paco Hope, Gary E. McGraw, Annie I. Antón · IEEE Security & Privacy · 2004
Software development is all about making software do something: when software vendors sell their products, they talk about what the products do to make customers' lives easier, such as encapsulating business processes or something similarly positive. Following this trend, most systems for designing software also tend to describe positive features. The authors provide a nonacademic introduction to the software security best practice of misuse and abuse cases, showing you how to put the basic science to work.