Critical infrastructure is dependent on complex software applications to perform vital societal functions including energy distribution, banking, and transportation. This report examines risks to critical infrastructure software and the opportunities afforded by secure design and a security development lifecycle process. You can download the report here.