Techniques and tools for implementing information security functions
(such as authentication, authorization, access control, encryption/
decryption, etc.) in software-intensive systems will not be discussed, except
to the extent that such techniques and tools can be applied, either “as is” or