Research into defining and classifying software security defects dates back to
1972, with the then National Bureau of Standards’ initiation of its Research
into Secure Operating Systems (RISOS) project. [20] Conducted by Lawrence
Livermore National Laboratory at the University of California, the RISOS project