What type of software requirement defines how the system should behave in terms of security, performance, or reliability?