As recently as 2006, Gary McGraw felt the need to remind his readers that,
“We must first agree that software security is not security software.” The
problem arising from the confusion of these terms [321] is that it can lead
to two incorrect conclusions: