assumption is that component-based systems are most likely to be information
systems (most recently, web services). Therefore, the security properties that
must be exhibited are information security properties: confidentiality, integrity,
and availability of information, and accountability of users.