aware of the additional costs associated with insecure software. In spite of
being a very active research field, no software engineering methodology
exists to ensure that security exists in the development of large scale software
systems. In addition to the security-enhanced lifecycle processes discussed