Meadows, C.A., "The Need for a Failure Model for Security",
Proceedings of DCCA4, Springer-Verlag, 
To Appear, 1994.

<blockquote>
We discuss the necessity and practicality of constructing a failure
model of security similar to that for fault-tolerance.
</blockquote>