experts. As opposed to most of the classification schemes
discussed in Section 2, our taxonomy focuses on code-level
security problems that occur in a range of software applications
rather than errors that are most applicable to specific kinds of