functions included in many secure programming guides.
In all cases, the authors seldom make clear whether their lists of secure
coding principles are, in fact, most effectively addressed at the implementation
level or whether, in fact, they are better addressed at the design or architecture