Analyses

Since some defense systems cannot be fully tested, the final proof lies in the same types of system analyses which define the requirements. The difference, however, is that this time the models have been validated by testing.