The Security Problem
Security must consider external environment of the
system, and protect it from:
unauthorized access.
malicious modification or destruction
accidental introduction of inconsistency.
Easier to protect against accidental than malicious
misuse