Process for Creating Abstractions in the Research View
To unify the Research view to conform to a single perspective, we tried to build abstractions of the core issues behind each weakness.
This work was performed inductively, using available weakness data. The primary source was the existing repository of weaknesses from CWE Drafts 8 and 9. Other sources were background knowledge and observed examples from CVE work that were not yet classified, repositories that we received under NDA, and substantial suggestions from an anonymous source.
The inductive process was not formal, but the general approach evolved so that "core issues" were defined in terms of invalid behaviors on resources. Abstraction was then performed on these two key concepts. This was not always done, however.