SOFTWARE SECURITY FRAMEWORK