software by the attacker, or tolerating the errors and failures that
result from such exploits
u Isolate, contain, and limit the damage resulting from any failures
caused by attack-triggered faultsthat the software was unable to resist