4) Common types that are restricted to particular environments, rarely-used
functionality, or users with special privileges.
5) Elimination of the most common vulnerability types, typically involving a
systematic code analysis and/or refactoring such as input validation frameworks