Section 3.1.3 describes a number of efforts to systematically characterize
and categorize common vulnerabilities and weaknesses in software.
Software Security Assurance State-of-the-Art Report (SOAR) 31
Section 3 Why is Software at Risk?