Reflections on operating in hostile environments

We introduce a generally applicable framework to assess and substantiate the security of a software component of a computer system. The framework constitutes a metamodel. Security models can be derived from it for components of a computer system. The concept of trust is interwoven into the metamodel and is an integral part of derived security models.