A Better Approach...

• Compare and analyze the behavior of a product with the product's requirements and expectations?

  • Does the program do what it is required to do and no more?

• Unexpected behaviors are considered “program security flaws” ethier:

  • Faults: programmer error
  • Failures: deviation from expected behavior