Additionally, these schemes focus mostly on operating system
security problems and do not classify the ones associated with
user-level software security. Furthermore, these taxonomies mix
implementation-level and design-level defects and are not