Many of these and other “secure coding” and “secure programming”
resources do not, however, make a clear-cut distinction between principles and
practices to be used in the design of the software, and those to be used during
the implementation of the software. Many secure coding lists include principles