steal data, or prevent the software from working at all.
The list is the result of collaboration between the MITRE CWE team, many top software security experts in the US
and Europe, and the SANS Institute. It leverages experiences in the development of the SANS Top 20 attack vectors (
http://www.sans.org/top20/ ), MITRE’s Common Weakness Enumeration (CWE) ( http://cwe.mitre.org/ ), and MITRE’s