audit code review computer insecurity human life mitre corporation penetration test quality assurance secure by design security engineering security testing source code validation