(late coding phase for whitebox, testing/integration phase for blackbox).
The problem is that because they attempt to cover so much of the
life cycle, these broad-scope secure coding guides tend to provide their
recommendations at a level of detail that may be right for an architect or