theoretical and comprehensive approach to classifying security
defects. Most research to date has been focusing on making the
scheme deterministic and precise, striving for a one-to-one
mapping between a vulnerability and the category the