descriptions of several previous software vulnerability and software flaw
categorization and taxonomy efforts, including Matt Bishop’s.
As a natural evolution from the multiplicity of efforts from the 1970s through
the 1990s to develop a definitive taxonomy of software (or software system) security