Integrating security and privacy in software development