box testing, regression testing, stress testing, third-party security
assessments, updating of threat models, and security measurements
(Section 5.5)
Software Security Assurance State-of-the-Art Report (SOAR) 97