for the functionalities and constraints that ensure the preservation of the
confidentiality, integrity, and availability of data, and the accountability of
users. Software security properties, both at the levels of the whole system and
of individual components, are seldom considered because C&A is driven by