Traditional Security Models

Historically, software security was treated as an afterthought, addressed only after most development work was completed. Remediating security issues late in the development cycle is far more costly and time-consuming than addressing them earlier. The traditional approach causes security issues to be discovered too late to address cleanly in the architecture.