Abstract
For some products, it's just too easy to find vulnerabilities. First, find the most heavily
used functionality, including the first points of entry into the product. Then, perform the
most obvious attacks against the most common types of vulnerabilities. Using this crude