for vulnerabilities and weaknesses in other software.This is not to say that software
in these categories is not underthreat: only that it appears to receive less explicit
attention from software assurance practitioners, initiatives, vendors, etc.
Note: The authors recognize that there is a great deal of activity focused on developing and establishing