compromise, the software should recover as quickly as possible to an
acceptable level of operational capability.
The focus of this document is the assurance of security as a
consistently demonstrated property in software. This state-of-the-art