systems interact with, and receive security protection from, their execution
environments. Also, the significant attention paid to issues of security
of commercial-off-the-shelf (COTS), OSS, and other nondevelopmental
software products is directly relevant, because such software products are