Evaluating the security fitness of a program is different from evaluating the programs functional fitness. Functional tests of a program test to make sure that the program does what it is supposed to do. Security tests of a program test to make sure that a program cannot be made to do anything it is not supposed to do. Why is security testing so much more difficult than functional testing? (consider testing a program for vulnerabilities to buffer overflow attacks). To what extent to you think software developers devote time and resources to functional testing versus security testing. Why? Is this concerning?