Analyzes security, not trust
Can CORAS analyze trust?
Threats that reduce trust -- trust as an asset to be protected like any other, using security techniques, etc.
CORAS 
