Tests to discover design defects are difficult to develop. Like the systems
engineers developing security designs, the testing group (whether independent
or not), will be able to construct test cases based on understanding the
psychology of the attackers and knowledge of typical software, hardware, and