propose and those discussed in related work. The classification
scheme we present is designed to organize security rules, and thus
be of help to software developers who are concerned with writing
secure code and being able to automate detection of security