Practical core software security : a reference framework /: a reference framework. (2022)