From the course: CSSLP Cert Prep: 4 Secure Software Implementation

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Common Weakness Enumeration (CWE)

Common Weakness Enumeration (CWE)

From the course: CSSLP Cert Prep: 4 Secure Software Implementation

Start my 1-month free trial

Common Weakness Enumeration (CWE)

- While the OWASP Top 10 list has gained a significant following, it's not the only resource at your disposal. Another source for helping you find application security vulnerabilities is the Common Weakness Enumeration or CWE list from MITRE. In the early 2000s, the MITRE Corporation, a nonprofit focused on security research for U.S. Federal agencies joined forces with U.S. Cert and the U.S. Department of Homeland Security to build a system to categorize hardware and software vulnerabilities. That system is known as CWE or Common Weakness Enumeration. In 2010, MITRE teamed up with SANS to identify the top 25 most dangerous software errors. Using MITRE CWE is the foundation for that activity. By combining their research, they were able to create a more detailed, more robust list in the OWASP Top 10, providing security testers with even deeper insights into application security risks that they should consider. The list…

Contents