Hoglund and McGraw [10]. Attack-based approaches are based
on knowing your enemy and assessing the possibility of similar
attack. They represent the black-hat side of the software security
equation. A taxonomy of coding errors is more positive in nature.