You are here

Home

HP Fortify Taxonomy: Software Security Errors

Fri, 2013-09-20 09:18 — drupalAdmin

This site presents a taxonomy of software security errors developed by the Fortify Software Security Research Group together with Dr. Gary McGraw. Each vulnerability category is accompanied by a detailed description of the issue with references to original sources, and code excerpts, where applicable, to better illustrate the problem.

General information
Vocabulary type: 
taxon
Was vocabulary created as a course project: 
0
Scope and Usage
Purpose: 

The primary goal of defining this taxonomy is to organize sets of security rules that can be used to help software developers understand the kinds of errors that have an impact on security. By better understanding how systems fail, developers will better analyze the systems they create, more readily identify and address security problems when they see them, and generally avoid repeating the same mistakes in the future.

When put to work in an analysis tool, a set of security rules organized according to this taxonomy is a powerful teaching mechanism. Because developers today are by and large unaware of the myriad ways they can introduce security problems into their work, making a taxonomy like this available should provide tangible benefits to the software security community.
 
Defining a better classification scheme can also lead to better tools: a better understanding of the problems will help researchers and practitioners create better methods for ferreting them out.
Provider
Vocabulary provider name: 
Hewlett Packard Enterprise Security
Provider URL: 

http://www8.hp.com/us/en/software-solutions/software.html?compURI=121436...

Powered by Drupal