The Top 25 list is the result of collaboration between the SANS Institute, MITRE, and many top software security
experts in the US and Europe. It leverages experiences in the development of the SANS Top 20 attack vectors ( http://
www.sans.org/top20/ ) and MITRE’s Common Weakness Enumeration (CWE) ( http://cwe.mitre.org/ ). MITRE
maintains the CWE and CAPEC websites, with support and sponsorship from the US Department of Homeland