system or in a different phase of development. Related assumptions include—
u The operating system supports mandatory access control, so the
software does not have to be secure.
u The software’s host is on a classified network, so the software does not