Automated identification of security issues from commit messages and bug reports
Symbolic execution and program testing