Missing: the same as "missing" in vulnerability theory
Ignored: a form of "missing" in which a protection mechanism is available, but the developer
does not use it in all situations
Broken: the same as "incorrect" in vulnerability theory