for discussing and analyzing vulnerabilities at an abstract level, but with more substance
and precision than heavily-abused, vague concepts such as "input validation" and
"denial of service." Our goal is to improve the research, modeling, and classification of
software flaws, and to help bring the discipline out of the dark ages. Our hope is that