particular environment within a particular threat landscape may no longer be
secure if that environment or threat landscape changes or if the software itself
changes. In terms of “testability,” security is also difficult to gauge. Software
testers can run 10,000 hours of testing and ultimately be very confident that