By contrast with Microsoft’s SDL, however, Oracle does not appearto consider
its Software Security Assurance Process to be widely usable or adaptable by other
software firms, and especially not by software development teams not involved
in commercial software product development. It provides some guidance for