software-specific risks, especially those that emerge in the software’s
development process rather than after deployment.
Only recently has management of security risks throughout the software
life cycle become a topic of widespread discussion, with techniques and