Code Audit

• Initially notice programming error

• Generalise to class of errors

• Look for others in class

• Can't do global "Find & Replace"

  • Minor but important semantic differences
  • Auditors must understand code