their ranks, they can “offload” responsibility for all software security concerns
to those experts, while they themselves continue to write software as they have
always done. Nevertheless, there is growing consensus within the software
security assurance community that all participants in a software development