information processed by the system) as the basis for its concept of whether
a system is “secure.” The focus of security for component-based development
has been on issues like security of information flows across intercomponent
interfaces and what the composite assurance level of a system assembled