equation. A taxonomy of coding errors is more positive in nature.
This kind of thing is most useful to the white-hat side of the
software security world. In the end, both kinds of approaches are
valid and necessary.