Addressing the Lack of Software Development Lifecycle Security