critical properties, such as security, reliability, safety, survivability, etc., in the face of wide ranges
of threats and accidents, and will contain no exploitable vulnerabilities either of malicious or
unintentional origin. Software that contains exploitable faults or malicious logic cannot justifiably
be trusted to “perform correctly” or to “predictably satisfy all of its critical requirements” because