Bugs Framework: Formalizing Cybersecurity Weaknesses and Vulnerabilites

The Bugs Framework (BF) is a classification of security bugs and related faults with multi-dimensional weakness and failure taxonomies that features a formal language for the unambiguous specification of security weaknesses and vulnerabilities. The goal of BF is to help better understand and detect software, firmware, or hardware security weaknesses and vulnerabilities, as well as to resolve or mitigate them.