Talk:Common Weakness Enumeration

This article is rated Start-class on Wikipedia's content assessment scale. It is of interest to the following WikiProjects:

Computer Security: Computing Low‑importance This article is within the scope of WikiProject Computer Security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Computer SecurityWikipedia:WikiProject Computer SecurityTemplate:WikiProject Computer SecurityComputer Security articles Low This article has been rated as Low-importance on the project's importance scale. This article is supported by WikiProject Computing. Things you can help WikiProject Computer Security with: AAlertBot. Please allow some days for processing. More information... Answer question about Same-origin_policy Review importance and quality of existing articles Identify categories related to Computer Security Tag related articles Identify articles for creation (see also: Article requests) Identify articles for improvement Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc. Find editors who have shown interest in this subject and ask them to take a look here. Software: Computing Low‑importance This article is within the scope of WikiProject Software, a collaborative effort to improve the coverage of software on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.SoftwareWikipedia:WikiProject SoftwareTemplate:WikiProject Softwaresoftware articles Low This article has been rated as Low-importance on the project's importance scale. This article is supported by WikiProject Computing. Computing: Software Low‑importance This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing articles Low This article has been rated as Low-importance on the project's importance scale. This article is supported by WikiProject Software (assessed as Low-importance). This article is supported by WikiProject Computer Security (assessed as Low-importance). Things you can help WikiProject Computer Security with: edit history watch purge AAlertBot. Please allow some days for processing. More information... Answer question about Same-origin_policy Review importance and quality of existing articles Identify categories related to Computer Security Tag related articles Identify articles for creation (see also: Article requests) Identify articles for improvement Create the Project Navigation Box including lists of adopted articles, requested articles, reviewed articles, etc. Find editors who have shown interest in this subject and ask them to take a look here.

A quick web search shows a lot of uses of CWE, including by the US Department of Homeland Security (https://buildsecurityin.us-cert.gov/swa/cwe) so it's probably notable. --Fritzophrenic (talk) 21:42, 24 September 2014 (UTC)[reply]

I know "primary source" stuff is frowned upon. Is MITRE's website for CWE considered primary source for the list of companies with a "compatible" product? Because their website has a larger list than the unsourced list in the article: http://cwe.mitre.org/compatible/compatible.html --Fritzophrenic (talk) 21:42, 24 September 2014 (UTC)[reply]

Maintaining a copy of the list here is kind of pointless. I updated the quantity based on current data and trimmed the list out - the article needs some serious help still. CodeCurmudgeon (talk) 00:41, 12 January 2018 (UTC)[reply]

I'm stashing some potential resources here to improve the article. Hope to do it in the next couple of days.

• https://gcn.com/articles/2011/06/28/cwe-top-25-programming-errors.aspx
• http://www.informit.com/articles/article.aspx?p=1322398
• http://www.electronicdesign.com/industrial-automation/what-s-difference-between-cwe-and-cqe
• https://phys.org/news/2017-12-unhackable-darpa-grant.html (maybe...)
• https://securityintelligence.com/capec-making-heads-or-tails-of-attack-patterns/
• http://www.electronicdesign.com/industrial-automation/look-inside-nist-s-dramatically-reducing-security-vulnerabilities-report
• http://www.assetfinanceinternational.com/index.php/technology/technology-archive/technology-articles/16114-financial-sector-at-greatest-risk-from-hackers-report-warns
• https://nebraska.pure.elsevier.com/en/publications/studying-software-vulnerabilities
• https://makingsecuritymeasurable.mitre.org/docs/cwe-intro-handout.pdf
• https://www.heise.de/developer/meldung/Top-25-der-Programmierfehler-revisited-932565.html

CodeCurmudgeon (talk) 00:31, 12 January 2018 (UTC)[reply]