should be applied to candidate software products and services before
acquiring them; to understand the specific security concerns associated
10 Software Security Assurance State-of-the-Art Report (SOAR)
Section 1 Introduction