Not enough emphasis is placed on the integrity of software, according to a software assurance group, which hopes to change that mentality with a new framework.