being exposed to threats that the systems’ designers never anticipated, and
the impact of a compromise made possible by such new exposure is likely to
be catastrophic. In a weapons system, for example, subversion of the software
that performs the latitude/longitude calculations for targeting could render the