and methodologies have been published, mainly in academia, but also in the
private sector by software security luminaries John Viega and Gary McGraw.
With the exception of Microsoft’s Security Development Lifecycle (SDL)
and Oracle’s Software Security Assurance Process, there is no documented