even the postgraduate level (although this is changing, as noted in Section 7.2).
This means many university-educated software developers graduate without a
clear understanding of the difference between software security functionality
and security as a property of software. Developers are unable to recognize the