What Is a CWE?
CWE stands for Common Weakness Enumeration. It’s a community-developed list of common software and hardware weaknesses that can lead to cybersecurity vulnerabilities.
It’s maintained by the MITRE Corporation.
The CWE system serves as a standard framework for identifying, classifying and categorizing known security weaknesses across different types of software systems.
By using CWEs, organizations can better understand the potential risks associated with different types of cyber threats and apply appropriate countermeasures to prevent attacks from occurring in the first place.
CWEs are regularly updated by industry professionals to reflect evolving threats and new attack vectors as they emerge over time.
What Is a Common Weakness Enumeration (CWE)? (Video)
Related Posts:
- What Are Tactics, Techniques, and Procedures (TTPs)?
- Weakness: Can We Identify Ours before They’re Exploited?
- Threat Model: Why Is Threat Modeling Crucial in Security Design?
- CVSS: How Reliable Is Its Score?
QUOTE:
"Amateurs hack systems, professionals hack people."