security testing tools in software engineering