programming not only includes information but does little to distinguish among
secure design principles (mapped to the design phase of the SDLC), secure
coding practices (mapped to the implementation phase of the SDLC), and
security testing techniques including post-compilation (blackbox) techniques