Jeremy Epstein. A Survey of Vendor Software Assurance Practices. In Twenty-Fifth Annual Computer Security Applications Conference, ACSAC 2009, Honolulu, Hawaii, 7-11 December 2009. pages 528-537, IEEE Computer Society, 2009. [doi]
Abstract is missing.