Traceability for the Maintenance of Secure Software