Towards Better Static Analysis Security Testing Methodologies