later extended by Viega [20]. In addition to classifying
vulnerabilities according to genesis, time, and location, he also
classifies them by consequence (effects of the compromise
resulting from the error) and other miscellaneous information,