References:
Simulation: when the program (or model) runs correctly, then one can be reasonably assured that the logic of the design is correct, for the cases that have been tested in the simulation.
If you could revise
the fundmental principles of
computer system design
to improve security...
... what would you change?