2407
Nature Type ID Name Page
HasMember 637 Unnecessary Complexity in Protection Mechanism (Not
Using 'Economy of Mechanism')
888 1403
HasMember 649 Reliance on Obfuscation or Encryption of Security-
Relevant Inputs without Integrity Checking
888 1430
HasMember 654 Reliance on a Single Factor in a Security Decision 888 1439
HasMember 656 Reliance on Security Through Obscurity 888 1444
HasMember 657 Violation of Secure Design Principles 888 1446
HasMember 671 Lack of Administrator Control over Security 888 1478
HasMember 693 Protection Mechanism Failure 888 1520
HasMember 749 Exposed Dangerous Method or Function 888 1564
Category-976: SFP Secondary Cluster: Compiler
Category ID : 976
Summary
This category identifies Software Fault Patterns (SFPs) within the Compiler cluster.
Membership
Nature Type ID Name Page
MemberOf 907 SFP Primary Cluster: Other 888 2388
HasMember 733 Compiler Optimization Removal or Modification of
Security-critical Code
888 1562
Category-977: SFP Secondary Cluster: Design
Category ID : 977
Summary
This category identifies Software Fault Patterns (SFPs) within the Design cluster.
Membership
Nature Type ID Name Page
MemberOf 907 SFP Primary Cluster: Other 888 2388
HasMember 115 Misinterpretation of Input 888 280
HasMember 187 Partial String Comparison 888 467
HasMember 188 Reliance on Data/Memory Layout 888 470
HasMember 193 Off-by-one Error 888 486
HasMember 349 Acceptance of Extraneous Untrusted Data With Trusted
Data
888 861
HasMember 405 Asymmetric Resource Consumption (Amplification) 888 986
HasMember 406 Insufficient Control of Network Message Volume
(Network Amplification)
888 990
HasMember 407 Inefficient Algorithmic Complexity 888 992
HasMember 408 Incorrect Behavior Order: Early Amplification 888 995
HasMember 409 Improper Handling of Highly Compressed Data (Data
Amplification)
888 996
HasMember 410 Insufficient Resource Pool 888 998
CWE Version 4.14
CWE-978: SFP Secondary Cluster: Implementation
CWE-978: SFP Secondary Cluster: Implementation