What is interesting is that despite all of the uncertainty about specific
security-enhanced methods and process models, the simple philosophy of
“fix the process, and you’ll fix the software” is being increasingly touted as
self-evident. [326] A major shift is underway, both among software suppliers