they have a great impact on the security assumptions under which later
development phases are performed. Inadequate security requirements lead to
deficient architectures, deficient architectures to defective designs, and so on.
To avoid this progression, software security analysis and testing need to begin