paths within the Java, C, or C++ source code as possible. The verifier is
used subsequently to ensure that security property violations have not
been reintroduced into source code during later coding.
With the cooperation of PatchLink Corporation, the NASA Independent