will make the software implemented from that design vulnerable to attack. [213]
A decrease in the number of vulnerabilities is a side effect of verifiable
correctness. Correctness can be largely ensured by adopting rigorous formal
methods, but at high cost. Semiformal modeling is a lower cost analysis method