Software Security Assurance State-of-the-Art Report (SOAR) 29
Section 3 Why is Software at Risk?
claims largely on faith. Given this, why should they pay a premium for vendorclaimed security when they had no way to independently evaluate it? With no
customer demand, vendors saw no market for more secure software, and were