vulnerabilities…[T]he push duration is ultimately determined by the amount of code that needs to be
reviewed for security.”
Software Security Assurance State-of-the-Art Report (SOAR) 351
Appendix G Comparison of Security Enhanced SDLC Methodologies