Assumptions

Intended Behavior Specification (R)

Nonsecurity

effect

failures

Implementation (I)

Security

effect

failures

Failures

Previous slide

Next slide

Back to first slide

View graphic version