(IAVA) program and entries in the NIST NationalVulnerability Database (NVD)
and the CommonVulnerabilities and Exposures (CVE)representreliable sources
116 Software Security Assurance State-of-the-Art Report (SOAR)
Section 5 SDLC Processes and Methods and the Security of Software