Common Weakness Enumeration

CWE Glossary Definition

Finding More Information about SwA

Please visit the resources below for additional information. Also, please feel free to recommend other items for inclusion on this page by contacting us at cwe@mitre.org.

• "Build Security In" (BSI) Web site, by U.S. Department of Homeland Security’s (DHS) National Cyber Security Division's (NCSD)
• "Build Security In" (BSI) Web site: “Software Supply Chain Risk Management & Due Diligence” Software Assurance Pocket Guide Series: Acquisition & Outsourcing, Volume II Version 1.2, June 16, 2009, by U.S. Department of Homeland Security’s (DHS) National Cyber Security Division's (NCSD)
• Common Vulnerabilities and Exposures (CVE®), a list of standardized vulnerability names
• Common Weakness Enumeration (CWE™)
• Common Weakness Scoring System (CWSS™)
• Common Weakness Risk Analysis Framework (CWRAF™)
• Software Assurance Metrics and Tool Evaluation (SAMATE) project, by National Institute of Standards and Technology’s (NIST)
• Software Assurance (SwA) Pocket Guide Series, by U.S. Department of Homeland Security’s (DHS) National Cyber Security Division's (NCSD)
• Software Assurance (SwA) Web site, by U.S. Department of Homeland Security’s (DHS) National Cyber Security Division's (NCSD)
• Static Analysis Tool Exposition (SATE), National Institute of Standards and Technology’s (NIST) research effort conducted for the improvement of static analysis tools that find security-relevant defects in source code, by National Institute of Standards and Technology’s (NIST)
• System Assurance (SysA) Task Force, by Object Management Group (OMG)
• SwA Program, Software Assurance Communities, by U.S. Department of Homeland Security’s (DHS) National Cyber Security Division's (NCSD)