A Vulnerability Taxonomy Methodology applied to the Web Services
Chris Vanden Berghe, James F Riordan, Frank Piessens · 2005
We present a methodology for taxonomizing vulnerabilities based on the likelihood that they will be present in a certain system. It attempts to capture and formalize the intuition that allows security professionals to make predictions about likely security problems. The method exploits the realization that the vulnerabilities present in a system are related to the set of properties that define the system.