2557
Other
The top level categories in this view represent commonly understood areas/terms within software
development, and are meant to aid the user in identifying potential related weaknesses. It is
possible for the same weakness to exist within multiple different categories.
Other
This view attempts to present weaknesses in a simple and intuitive way. As such it targets a single
level of abstraction. It is important to realize that not every CWE will be represented in this view.
High-level class weaknesses and low-level variant weaknesses are mostly ignored. However, by
exploring the weaknesses that are included, and following the defined relationships, one can find
these higher and lower level weaknesses.
Metrics
CWEs in this view Total CWEs
Weaknesses 399 out of 938
Categories 40 out of 374
Views 0 out of 50
Total 439 out of 1362
View-700: Seven Pernicious Kingdoms
View ID : 700
Type : Graph
Objective
This view (graph) organizes weaknesses using a hierarchical structure that is similar to that used
by Seven Pernicious Kingdoms.
Audience
Software Developers
This view is useful for developers because it is organized around concepts with which developers
are familiar, and it focuses on weaknesses that can be detected using source code analysis
tools.
Membership
Nature Type ID Name Page
HasMember 2 7PK - Environment 2308
HasMember 227 7PK - API Abuse 2313
HasMember 254 7PK - Security Features 2314
HasMember 361 7PK - Time and State 2320
HasMember 388 7PK - Errors 2322
HasMember 398 7PK - Code Quality 2323
HasMember 485 7PK - Encapsulation 2328
HasMember 1005 7PK - Input Validation and Representation 2421
Notes
Other
The MITRE CWE team frequently uses "7PK" as an abbreviation for Seven Pernicious Kingdoms.
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
CWE Version 4.14
CWE-701: Weaknesses Introduced During Design
CWE-701: Weaknesses Introduced During Design