points, i.e. where input enters the product and where the attacker actually triggers the
vulnerability. The crossover and activation points might also be useful. For example, in
XSS and second-order SQL injection, the activation point is in a different process than
the trigger point, which would be less likely to be found during code analysis or