Misuse and abuse cases: getting past the positive

Software development is all about making software do something: when software vendors sell their products, they talk about what the products do to make customers´ lives easier, such as encapsulating business processes or something similarly positive. Following this trend, most systems for designing software also tend to describe positive features. The authors provide a nonacademic introduction to the software security best practice of misuse and abuse cases, showing you how to put the basic science to work.