https://softwarepatternslexicon.com/d/security-patterns/security-testing-and-auditing/