Virginia. In retrospect, the paper is interesting less for the authors’ own attempt
34 Software Security Assurance State-of-the-Art Report (SOAR)
Section 3 Why is Software at Risk?
to identify and categorize security-relevant software flaws than for its critical