Difference between theory and practice in security and reliability. February 25, 2007 yodaiken operating systems, systems Theory of how F-22 Fighter software is going to be made bulletproof. Practice. Update: More practice (noted by Ben_k on Bruce Schneier’s weblog). Update2: See this paper and this one.