https://zporigin.leaddev.com/software-quality/being-secure-by-design-engineer-led-security