Classes of Vulnerabilities and Attacks
Pascal Charles Meunier · Wiley Handbook of Science and Technology for Homeland Security · 2008
Abstract In the first part of this article, popular vulnerability and attack types used in books, vulnerability disclosures, and databases are reviewed. They are discussed in the context of what makes them useful and how they fail to meet scientific criteria, without going into the exploit details. Practical efforts such as the various MITRE enumerations and lists of common security problems by other organizations are also reviewed. The second part discusses attempts at scientific classifications, with the reasoning leading to the current state of the art. The third part discusses ongoing and future research with a focus on ontologies.