separate security architecture views into the overall system architecture view.
Because it is system oriented, C&A reflects one of the weaknesses of system
engineering approaches to the software security challenge. Because individual
system components are seen as “black boxes,” activities within the software