1. A method of customizing a security report, the method comprising: assigning respective edge weights to edges of a plurality of paths in a control flow graph representing a model of data flow of a computer program; processing, via a processor, edge weights assigned to each edge to determine a total edge weight for the respective paths, the total edge weight for a respective path being a sum of the edge weights assigned to the respective edges of the path; identifying at least one path in the control flow graph whose total edge weight satisfies a particular total edge weight criteria; updating the control flow graph to indicate to the user the at least one path in the control flow graph whose total edge weight satisfies the particular total edge weight criteria; and presenting the updated control flow graph to the user.