The categorization and classification (“taxonomization”) of security
vulnerabilities and weaknesses in software and software-intensive systems has
been one of the most persistently active areas of software security assurance
research. Indeed, this area of research began formally as far back as the