and practitioners create better methods for ferreting them out.
We propose a simple, intuitive taxonomy, which we believe is the
best approach for our stated purpose of organizing sets of
software security rules that will teach software developers about