have changed by the time the software is deployed. The threat environment in
which the software will actually operate is unlikely to have remained static. New
threats and attack patterns are continually emerging. Also emerging are new
versions of nondevelopmental components and patches to those components.