This is what I was going to cite. I like Raymond and his blog, but I wouldn't exactly call him a security software expert... ...yet just look...
Separate names with a comma.