Industry Initiatives

Common Weakness Enumeration (CWE)

CWE^™, or Common Weakness Enumeration, is a community-developed dictionary of common software weaknesses. International in scope and free for public use, CWE provides a unified, measurable set of software weaknesses that will enable more effective discussion, description, selection, and use of software security tools and services that can find these weaknesses in source code.

[cwe.mitre.org]

National Institute of Standards and Technology (NIST)

Founded in 1901, NIST is a non-regulatory federal agency within the U.S. Commerce Department's Technology Administration. NIST's mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life. Klocwork supports the efforts of NIST through our contributions to SAMATE.

[www.nist.gov ]

CERT / Software Engineer Institute

In association with the Software Engineering Institute (SEI) at Carnegie Mellon University, the CERT Secure Coding Initiative works with software developers and software development organizations to reduce vulnerabilities resulting from coding errors before they are deployed. CERT identifies common programming errors that lead to software vulnerabilities, publishes secure coding standards, and educates software developers with the goal of advancing the state of the practice in secure coding.

[www.cert.org]