PROPERTY: a security-relevant attribute of a behavior, data, code, or resource that must be
transformed or preserved throughout operation of the product. For example, user input might
initially contain arbitrary contents. After the system verifies that the input only contains letters
and numbers, then the input might be treated as valid with respect to the property