code that has already been written. The majority of these tools fall into the
category of static analysis tools, although the number of tools for fuzzing
and fault injection is increasing, as is the number of verifying compilers that
perform security checks.