scheme is amenable to automatic identification and can be used
with static analysis tools for detecting real-world security
vulnerabilities in software. Our approach is also an alternative to
a number of broad classification schemes that focus exclusively