Nor will all of the patterns flagged by the automated scanner necessarily
be vulnerabilities.Automated scanners can produce high rates of “false
positives,” i.e., patterns that appear to be vulnerabilities but which,in the
context of the actual program, are not. The usual approach to reducing