Background: Software projects are facing the need to adopt security practices during the
software development life cycle (SDLC). Nevertheless, the amount of effort to be invested in …