Text this: Software security characteristics for function point analysis