A body of knowledge containing laws, axioms and provable theories relating to some aspect of system security.