Strategies to Identify Database Security Threats and Vulnerabilities at Early Stage