The 2009 CWE/SANS Top 25 Most Dangerous Programming Errors is a list of the most significant programming errors that can lead to serious software vulnerabilities.
Insecure Interaction Between Components (9)
- Nine weaknesses related to insecure ways in which data is sent and received between separate components, modules, programs, processes, threads, or systems.
On the Cusp: Other Weaknesses to Consider (2)
- Many weaknesses were considered for inclusion on the Top 25, but some did not make it to the final list. Some were not considered to be severe enough; others were not considered to be prevalent enough. Users of the Top 25 should seriously consider including these weaknesses in their analyses.
Porous Defenses (7)
- Seven weaknesses related to defensive techniques often misused, abused, or ignored.
Risky Resource Management (9)
- Nine weaknesses related to ways in which software does not properly manage the creation, usage, transfer, or destruction of important system resources.
DACS Gold Practice Initiative
