implementation faults (and in the case of application vulnerability scanners, configuration vulnerabilities). It is not
effective at finding architectural and design weaknesses, or byzantine implementation faults.
Software Security Assurance State-of-the-Art Report (SOAR) 193
Section 5 SDLC Processes and Methods and the Security of Software