Even if the security of all of the system’s individual components can be
established, this will not be enough to predict whether their secure behavior
will continue to be exhibited when they interact with other components in a
larger component-based system. Nor will it help predict the overall security