“SDL is driven by actual experience with what results in software that isn't secure.”

Transcript evidence from Steve Lipner — The Past, Present, and Future of SDL.