A Security Testing Process in the Software Development Lifecycle