This kind of thing is most useful to the white-hat side of the
software security world. In the end, both kinds of approaches are
valid and necessary.
The classification scheme proposed by Aslam [2] is the only