For years, software security focused on the final product: the code that ships. Today, attackers are increasingly targeting ...