https://www.sans.org/reading-room/whitepapers/securecode/role-static-analysis-hardening-open-source-intrusion-detection-systems-36847