Ounce Labs released a valuable resource for everybody involved in the Software Security business. “Software Security Assurance: A Framework for Software Vulnerability Management and Audit” is more than a framework, it’s a call to action driven by the need for better understanding of roles and responsibilities in software security assurance.

One way to avoid re-inventing the wheel and also learn more about the source code you intend to use is to use a source code search engine.

Java Source Code Audit tools