code review tool, a fuzzer, a secure C library, and other software security tools
used by the company’s own developers.
As Kris Britton of the NSA Center for Assured Software (CAS) has
observed, [276] the level of integration of such tools has not extended nearly as