are explicitly handled in ways consistent with the attack resistance,
attack tolerance, and fail-secure requirements of the software
Fail-secure If the software must fail, it should do so gracefully and securely. It should
not simply crash or hang, and its failure should notresult in a core dump,