Software Security: Building Security In

The seven pernicious kingdoms are a simple, effective organizing tool for software security coding errors. With over 60 clearly defined phyla, the taxonomy here is both powerful and useful. Descriptions of the phyla can be found on the Web at <http://vulncat.fortifysoftware.com>.

The classification scheme here is designed to organize security rules and thus be of help to software developers who are concerned with writing secure code and being able to automate detection of security defects. These goals make the taxonomy:

• Simple

• Intuitive to a developer

• Practical (rather than theoretical and comprehensive)

• Amenable to automatic identification of errors with static analysis tools

• Adaptable with respect to changes in trends that happen over time

Taxonomy work is ongoing. Your help is requested.