## 6 Main Results  
### Overall Analysis by Characteristics  
This section presents the results of the classification and analysis of the selected studies. The first aspect focuses on the type of publication, whether journals or congresses. Most of the study articles were published in different journals (30 articles), which represents 77% of the total articles. The databases of these journals are IEEE Xplore, Web of Science, ACM, and Scopus. On the other hand, the articles published in conferences represent 23% of the total analyzed (9 articles, see Figure 3). This allows us to indicate which type of publication is more attractive to researchers in security aspects.  
A second aspect of the classification focuses on the sources of the primary published studies, which helps us to identify which databases are most active in security aspects (see Figure 4). The sources defined for the study correspond to Web of Science, ACM Digital Library, Science Direct, Scopus, and IEEE Xplore; according to the findings, there is a wide preference in the research community for publishing in IEEE Xplore with 51% of the selected works. In second place is Scopus with 26%, Web of Science with 13% of the preferences, and finally ACM Digital Library with 4 selected articles. It is important to mention that in Science Direct, there were no papers contributing to this research, which may be because it is not an interesting and attractive source for researchers in the area.  
Figure 3: Articles published in journals and conferences.  
Regarding the years of publication of the selected articles, the following Figure 5 illustrates the distribution of the studies by year of publication. A downward trend is evident since 2020, this is probably due to the pandemic effect. In 2019, there was a considerable increase in publications, with 11 papers. It is important to consider that the search was performed in August 2022, so it is expected that by the end of the year, there may be more publications in the area.  
Another aspect that needs to be discussed and will provide us with inputs to answer the research questions is to know what is the proportion of articles that contribute to the research topic, specifically on security in the software development cycle.  
Of the articles reviewed, it can be seen that just over half of the articles analyzed (54%) use security in the phases of the software development cycle (SDLC), corresponding to 21 articles. However, there is a significant number of articles (26%) that refer to the evaluation of security metrics, comparisons, and risk analysis, among others that do not consider applying security in any phase of the SDLC. Finally, 8 articles were found that do not consider the use of security in the SDLC phases.  
The classification of articles was carried out considering:  
* Articles that use security in the SDLC phases (see Figure 6),
* Articles that use a methodology or propose a process,
* Articles that evaluate security after applying the proposed method.  
Figure 4: Articles database.  
Figure 5: Article publications by years.  
The analysis shows that the largest number of papers are concentrated in the implementation category, with 28 (72% of the total). Of these, 17 correspond to the Software Industry category according to the context where they are developed, representing 44% of the total.  
Regarding the time dimension of these 17 works, it is evident that their concentration is in 2020 with 6 works, then there is a decline in 2021 and 2022, which may be due to the pandemic. It is important to mention that the data extraction was performed in August 2022, so it can be inferred that at the end of the year, this amount should be higher.