A Decade of Reoccurring Software Weaknesses
Assane Gueye, Carlos Eduardo Cardoso Galhardo, Irena Bojanova, Peter Mell · IEEE Security & Privacy · 2021
The Common Weakness Enumeration (CWE) community publishes an aggregate metric to calculate the 'Most Dangerous Software Errors.' However, the used equation highly biases frequency over exploitability and impact. We provide a metric to mitigate this bias and discuss the most significant software weaknesses over the last ten years.