tag:blogger.com,1999:blog-4214349551493329764.post5205789730462214975..comments2008-09-25T14:42:56.601-06:00Jason Meltzerhttp://www.blogger.com/profile/05689158632756750517noreply@blogger.comBlogger1125tag:blogger.com,1999:blog-4214349551493329764.post-83556386089286207312007-07-18T18:20:00.000-06:002007-07-18T18:20:00.000-06:00The "vulnerability theory" documents on the CWE site (http://cwe.mitre.org/about/documents.html), recently released, are examples of how we're doing additional work besides just creating a "taxonomy" (which CWE isn't, despite the usage of the term). While there are limitations to classification/taxonomy work, a dogged refusal to consult them would mean that research would be haphazard at best. Oops, I forgot, it already is.<BR/><BR/>Steve Christey, doing his usual highly-delayed blog comments.Steve Christeycwe.mitre.org/docsnoreply@blogger.com