or whole-life cycle (for examples of the latter, see Section 5.1.8).
u Software security metrics for measuring both security of software
itself and impact of different life cycle processes on the ability to
achieve secure software.