|
|
|
|
Status Report
Version 2.1 was released on June 21, 2013,
and includes the following: added 1 new "Deprecated Entries" View ( CAPEC-483);
deprecated 15
Web Application Security Consortium (WASC) entries; added various
missing summaries and enhanced several entries; fixed some minor typos;
recast code into code-formatting blocks; and overhauled
References/Citations. The
CAPEC Schema was updated to
Version 2.6 to remove the capec:Reference_Description field, and to make the
enumerated values whitespace-flexible. In addition, some max/minOccurs were
changed/added to support content maintenance. The
Schema Documentation was
also updated to Version 2.6. Read the
release notes.
|
| |
|
|
CAPEC™ International in scope and free for public use, CAPEC is a publicly available, community-developed list of common attack patterns along with a comprehensive schema and classification taxonomy. Attack patterns are descriptions of common methods for exploiting software systems. They derive from the concept of design patterns applied in a destructive rather than constructive context and are generated from in-depth analysis of specific real-world exploit examples.
To respond effectively, the community needs to think outside of the box and have a firm grasp of the attacker’s perspective and the approaches used to exploit software systems. CAPEC provides this information to the community in order to help enhance security throughout the software development lifecycle and to support the needs of developers, testers, and educators.
Release 2.1 Available
|
|
|
|
|
