convenience of identifying strategies to remedy security
problems. For example, if most security issues are introduced
inadvertently, increasing resources devoted to code reviews
becomes an effective way of increasing security of the system.