Stichworte: identify common security misconfigurations