Most existing classification schemes, as is evident, begin with a
theoretical and comprehensive approach to classifying security
defects. Most research to date has been focusing on making the
scheme deterministic and precise, striving for a one-to-one