Risk-driven specification

Critical systems specification supplements the nonnal requirements specification process
by focusing on the dependability of the systlem. Its objective is to understand
the risks faced by the system and generate dependability requirements to cope with
them. Risk-driven specification has been widely used by safety and security critical
systems developers. In safety-critical systems, the risks are hazards that can result
in accidents; in security-critical systems, the risks are vulnerabilities that can lead to
a succt:ssful attack on a system.