Draft Version 1.2 of DHS’ Security in the Software Life Cycle [7] includes
descriptions of a number of secure software process models, software
methodologies (security-enhanced and not), threat modeling/risk assessment
techniques, and security testing techniques, with information current as