805
facilitate discussion and review by the broader ICS/OT community, and they are likely to change
in future CWE versions.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Using a broken or risky cryptographic
algorithm
OWASP Top Ten 2004 A8 CWE More Specific Insecure Storage
CERT C Secure Coding MSC30-
C
CWE More
Abstract
Do not use the rand() function for
generating pseudorandom numbers
CERT C Secure Coding MSC32-
C
CWE More
Abstract
Properly seed pseudorandom number
generators
The CERT Oracle Secure
Coding Standard for Java
(2011)
MSC02-J Generate strong random numbers
OMG ASCSM ASCSMCWE-