occurs when the command is passed from the application to the OS.
ACTIVATION POINT: the location at which the software violates the intended security policy,
i.e., where the attacker's "payload" becomes active; presumably, the payload involve the
incorrect behaviors. For example, in SQL injection, the activation point occurs when the