The Microsoft Windows development team spent two months in 2002 analyzing product design, code, and documentation to fix security issues. The results of this security push include a new process and several lessons learned for future projects.
No takes yet. Share an insight, caveat, or question.
Howard et al. (2003) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: