As noted by Mouratidis and Giorgini, [78] in spite of active
research, no software engineering methodology exists to ensure that
security exists in the development of large-scale software systems.
No matter what life cycle model is followed, current research