understood: at no point in the software development life cycle (SDLC) are
developers or users able to determine with 100 percent certainty that the
software is secure nor, to the extent that it is considered secure, what makes
it so. Software security is a dynamic property—software that is secure in a