components. Such conflicts, often referred to as security mismatches, usually
originate in an inconsistency between the security assumptions one component
has about another’s security properties, functionality, policy rules, constraints,
etc., and those that the second component actually exhibits. The problem is