compose the system. The behaviors and security deficiencies within each black
box component are not examined. Nor do system C&A artifacts and reviews
provide sufficiently detailed information about the individual components
to enable the certifier to trace system security vulnerabilities to the faults and