On the derivation of secure components