vulnerabilities or weaknesses, exposed or not).
3. Its error and exception handling routines enable it to maintain a secure
state when confronted by attack patterns or intentional faults.
4. It satisfies all of its specified and implicit nonfunctional security