affects all software engineering practices using modern languages.
It remains a research challenge to develop formal methods for the
specification and verification of non-trace security properties in software, such
as non-subvertability of processes and predictability of software behavior under