Add software security methodology

[dbosk]

There is some work on how to achieve good software security in an organization, e.g.:

• BSIMM, overview in Computer 2016:1.

Other material on software security can be found here:

• Wheeler's Secure Programs
• Viega and McGraw's Building Secure Software: How to Avoid Security Problems the Right Way
• McGraw's Software Security: Building Security In

[dbosk]

Microsoft Security Development Lifecycle