that are done focus solely on system-level vulnerabilities in security functions
of the system, rather than on the types of software vulnerabilities that may be
exploited to compromise the system’s overall dependendability. Fortunately,
these (and other) inadequacies of the CC and its associated evaluation schemes