parameter checking, e.g., lack of checks for buffer overflows, SQL injections, etc.
In their paper, A Practical Evaluation of Security Patterns, [227] Spyros
Halkidis et al. apply the STRIDE threat modeling criteria to the evaluation of two
web applications, one of which was developed without use of the security design