Studying Attacks to Improve Software Defense