explanations and examples of each. Since this publication, there have been several
attempts at categorizing and classifying software based attack patterns, including—
u CAPEC: Initiated by the DHS Software Assurance Program in 2006, the
Common Attack Pattern Enumeration and Classification (CAPEC)