Understanding Security Vulnerabilities: A First Step in Preventing Attacks