for which safety and quality are to be assured. These properties include
correctness, predictability, and fault tolerance (or, in the case of security, attack
tolerance). The analogy between safety and security is particularly close. The
main difference is that safety-relevant faults are stochastic (i.e., unintentional or