to answer that question by offering a set of findings that mirror many of the
secure software design, coding, and testing principles and practices repeated
a decade or more later in the proliferation of books, articles, and courses on
secure software development.