that are intuitive to software developers who are not security
experts. As opposed to most of the classification schemes
discussed in Section 2, our taxonomy focuses on code-level
security problems that occur in a range of software applications