Core Software Security: Security at the Source