Note that the Testing section of DHS’ Security in the Software Life Cycle
lists some key indicators of root causes for software’s inability to exhibit the
above properties and behaviors during testing.
To yield meaningful results, software security test plans should include a