integrated framework, or in some instances, phase-by-phase guidance for
promoting security-enhanced development of software throughout the
life cycle phases. The methodologies described here either modify traditional
SDLC activities, or insert new activities into the SDLC, with the objective