4. Review of Security Specification—Ensures design content of the software
is in accordance with its security specification. This phase also includes
penetration testing that initiates all identified attacks and future attack
patterns online into the software.