including user-level enterprise software. This fact distinguishes
the list from other classification schemes. The classes are simple
and intuitive. However, this list defines attack classes rather than
categories of common coding errors that cause these attacks. A