Security vulnerabilities often are introduced into software during the development process. What hasn't been well understood is the solution to the problem.