ability to control vulnerabilities against attacks
System Operation u Monitor and detect unexpected behaviors, failures, and intrusions
u Generate new attack specifications
u Reconcile and integrate new attack specifications into formal