u Security assurance (Section 5.5.4).
Cigital’s viewpoint is, of course, not the only one. Like Cigital, Marco
Morana of Foundstone suggests an activity-driven approach. However, his
approach combines both long-term, holistic software security approaches to