appropriate assumptions about security. Because many universities do not
teach the importance of security—or the activities necessary to develop secure
software—many developers are untrained in security. To remedy this, DHS is
sponsoring the development of Software Assurance: A Guide to the Common