ones most likely to affect software security. Finally, we
concentrate on classifying errors that are most important to realworld enterprise developers—we derive this information from the
literature, our colleagues, and our customers.
1. Input Validation and Representation