properly automated. The database of vulnerabilities collected in
the study was never published.
Landwehr, Bull, McDermott, and Choi [12] classify each
vulnerability from three perspectives: genesis (how the problem