No security "holes" via software bugs
Entities: passwords, digital signatures, smartcards
Data: signed messages, message integrity checksums
Policies, protocols, object integrity
File permissions, access control lists, digital credentials
Encrypted channels/messages, dedicated links