Software Fault Pattern (SFP) Clusters

A view in the Common Weakness Enumeration published by The MITRE Corporation.

  • Source

    CWE Catalog - 4.12

  • Identifier

    CWE-888

  • Status

    Incomplete

Contents

Objective

Views in the Common Weakness Enumeration (CWE) represent one perspective with which to consider a set of weaknesses.

CWE identifiers in this view are associated with clusters of Software Fault Patterns (SFPs).

Categories

SFP Primary Cluster: Access Control

This category identifies Software Fault Patterns (SFPs) within the Access Control cluster (SFP35).

SFP Primary Cluster: API

This category identifies Software Fault Patterns (SFPs) within the API cluster (SFP3).

SFP Primary Cluster: Authentication

This category identifies Software Fault Patterns (SFPs) within the Authentication cluster (SFP29, SFP30, SFP31, SFP32, SFP33, SFP34).

SFP Primary Cluster: Channel

This category identifies Software Fault Patterns (SFPs) within the Channel cluster.

SFP Primary Cluster: Cryptography

This category identifies Software Fault Patterns (SFPs) within the Cryptography cluster.

SFP Primary Cluster: Entry Points

This category identifies Software Fault Patterns (SFPs) within the Entry Points cluster (SFP28).

SFP Primary Cluster: Exception Management

This category identifies Software Fault Patterns (SFPs) within the Exception Management cluster (SFP4, SFP5, SFP6).

SFP Primary Cluster: Failure to Release Memory

This category identifies Software Fault Patterns (SFPs) within the Failure to Release Memory cluster (SFP38).

SFP Primary Cluster: Faulty Resource Release

This category identifies Software Fault Patterns (SFPs) within the Faulty Resource Release cluster (SFP37).

SFP Primary Cluster: Information Leak

This category identifies Software Fault Patterns (SFPs) within the Information Leak cluster (SFP23).

SFP Primary Cluster: Malware

This category identifies Software Fault Patterns (SFPs) within the Malware cluster.

SFP Primary Cluster: Memory Access

This category identifies Software Fault Patterns (SFPs) within the Memory Access cluster (SFP7, SFP8).

SFP Primary Cluster: Memory Management

This category identifies Software Fault Patterns (SFPs) within the Memory Management cluster (SFP38).

SFP Primary Cluster: Other

This category identifies Software Fault Patterns (SFPs) within the Other cluster.

SFP Primary Cluster: Path Resolution

This category identifies Software Fault Patterns (SFPs) within the Path Resolution cluster (SFP16, SFP17, SFP18).

SFP Primary Cluster: Predictability

This category identifies Software Fault Patterns (SFPs) within the Predictability cluster.

SFP Primary Cluster: Privilege

This category identifies Software Fault Patterns (SFPs) within the Privilege cluster (SFP36).

SFP Primary Cluster: Resource Management

This category identifies Software Fault Patterns (SFPs) within the Resource Management cluster (SFP37).

SFP Primary Cluster: Risky Values

This category identifies Software Fault Patterns (SFPs) within the Risky Values cluster (SFP1).

SFP Primary Cluster: Synchronization

This category identifies Software Fault Patterns (SFPs) within the Synchronization cluster (SFP19, SFP20, SFP21, SFP22).

SFP Primary Cluster: Tainted Input

This category identifies Software Fault Patterns (SFPs) within the Tainted Input cluster (SFP24, SFP25, SFP26, SFP27).

SFP Primary Cluster: UI

This category identifies Software Fault Patterns (SFPs) within the UI cluster.

SFP Primary Cluster: Unused entities

This category identifies Software Fault Patterns (SFPs) within the Unused entities cluster (SFP2).

See Also

  1. System Assurance

    Nikolai Mansourov, Djenana Campara

  2. Task Order 0006: Vulnerability Path Analysis and Demonstration (VPAD). Volume 2 - White Box Definitions of Software Fault Patterns

    Ben Calloni, Nikolai Mansourov, Djenana Campara

Common Weakness Enumeration content on this website is copyright of The MITRE Corporation unless otherwise specified. Use of the Common Weakness Enumeration and the associated references on this website are subject to the Terms of Use as specified by The MITRE Corporation.