DEFENSIVE SOFTWARE INTEGRITY
Security-sensitive software must be able to rely on the integrity of the components and policy decisions on which it depends. Research in this area asks how those dependencies can be identified, checked, and maintained when the surrounding environment is under pressure.
Those findings inform defensive software design without implying that any one mechanism is universally sufficient.