to detect through testing, primarily because of software’s extreme
and ever-increasing complexity. Moreover, adversaries need not
be capable of or resort to implanting malicious code to penetrate
commercial software-based DoD systems. They can readily exploit