compels emphasis on achieving a truly trustworthy TCB that can be
used in the creation of scalable secure systems.
3. Secure System Composition
s 4HIS REMAINS A CRUCIAL HARD PROBLEM WITH MANY DIFlCULTIES