required to ensure that the software, in operation, will continue to
operate dependably despite the presence of sponsored (intentional)
faults. In practical terms, such software must be able to resist most
attacks, tolerate as many as possible of those attacks it cannot resist,