Integrating Security and Testing Practices