Thinking About Software Security Holistically
threatpost.com