vulnerability category. Aslam’s system is well-defined and offers
a simple way for identifying defects by similarity. Another
contribution of Aslam’s taxonomy is that it draws on software
fault studies to develop its categories. However, it focuses