u Recording of Compromises—If the software behaves suspiciously or is
compromised, trails of evidence can aid in determining whether the
Software Security Assurance State-of-the-Art Report (SOAR) 171
Section 5 SDLC Processes and Methods and the Security of Software