A Security Architecture for Survivable Systems