2006, NSA’s Malicious Code Tiger Team (established by the NSA Information
Systems Security Engineering organization, with members also invited from
the NSA Center for Assured Software) began work on Guidance for Addressing
Malicious Code Risk. The primary purpose of this document is to provide