What developers should focus on to strengthen software security