A Suite of Metrics for Calculating the Most Significant Security Relevant Software Flaw Types

Peter Mell, Assane Gueye

The Common Weakness Enumeration (CWE) is a prominent list of software weakness types. This list is used by vulnerability databases to describe the underlying security flaws within…