Laboratory’s (NRLs) Center for High Assurance Computer System (CHACS)
published A Taxonomy of Computer Program Security Flaws, with Examples.
[21] This document proposed a taxonomy of security flaws that would classify
flaws according to how, when, and where they were introduced into the