objectives. As part of the Software Assurance public-private collaboration efforts, the Department of Homeland Security
(DHS) Office of Cyber Security and Communications, together with other Federal partners, has provided sponsorship of
Common Weakness Enumeration (CWE) and the Common Attack Pattern Enumeration and Classification (CAPEC) that
continue to mature through more widespread use. If not mitigated, these software weaknesses could be sources for future