David Geer: Are Companies Actually Using Secure Development Life Cycles?. Computer 43(6): 12-16 (2010)