For further on this topic, consider Matt Bishop's "Computer Security -
Art and Science"