Owl: Approach to security Software design and code quality are first priority Source code review Pieces of code which are typically run with privileges greater than those of a regular user and/or typically process data obtained over a network are audited before the corresponding software component is included; this applies to relevant code paths in many of the system libraries all SUID/SGID programs all daemons and network services