Taking Responsibility For Application Security