techniques for detecting vulnerabilities and guidance for coding in a manner
that will improve the effectiveness of this analysis. When static analysis is not
feasible, the TR may suggest the use of other testing or verification techniques.
Whenever possible, the report will help users understand the costs and