u Absence of security in software and system engineering
u High cost of formally specifying security properties
u Cycle of “penetrate and patch”
u Predominantly piecemeal approach to security assurance.