Exploring software security approaches and their limitations in SDLC