11 (Davis, CA: University of California, September 1996).
In late 2005, the anonymous author of the “Writing Secure Software” blog published a less formal
analysis of the various vulnerability taxonomies in circulation. See “Trusted Consultant, Threat and
Vulnerabilities Classification, Taxonomies,” “Writing Secure Software” blog, December 26, 2006.