Read Section G of chapter 6. The last few lectures illustrated how easy it is to design insecure computer systems, even if the designer has the best intentions. Today's lecture discusses some approaches that help getting some confidence in the security of a design.