Security requirements differ greatly from one system to another. One
typically needs some combination of user authentication, transaction
integrity and accountability, fault-tolerance, message secrecy, and
covertness. But many systems fail because their designers protect the