{"@ID": "1008", "@Name": "Architectural Concepts", "@Type": "Graph", "@Status": "Obsolete", "Objective": "This view organizes weaknesses according to common architectural security tactics, as proposed in 2017 as part of an academic \"Common Architectural Weakness Enumeration (CAWE)\" project. The view was intended to assist architects in identifying potential mistakes that can be made when designing software.", "Audience": {"Stakeholder": [{"Type": "Software Developers", "Description": "Architects that are part of a software development team may find this view useful as the weaknesses are organized by known security tactics, aiding the architect in embedding security throughout the design process instead of discovering weaknesses after the software has been built."}, {"Type": "Educators", "Description": "Educators may use this view as reference material when discussing security by design or architectural weaknesses, and the types of mistakes that can be made."}]}, "Members": {"Has_Member": [{"@CWE_ID": "1009", "@View_ID": "1008"}, {"@CWE_ID": "1010", "@View_ID": "1008"}, {"@CWE_ID": "1011", "@View_ID": "1008"}, {"@CWE_ID": "1012", "@View_ID": "1008"}, {"@CWE_ID": "1013", "@View_ID": "1008"}, {"@CWE_ID": "1014", "@View_ID": "1008"}, {"@CWE_ID": "1015", "@View_ID": "1008"}, {"@CWE_ID": "1016", "@View_ID": "1008"}, {"@CWE_ID": "1017", "@View_ID": "1008"}, {"@CWE_ID": "1018", "@View_ID": "1008"}, {"@CWE_ID": "1019", "@View_ID": "1008"}, {"@CWE_ID": "1020", "@View_ID": "1008"}]}, "References": {"Reference": [{"@External_Reference_ID": "REF-9"}, {"@External_Reference_ID": "REF-10", "@Section": "pages 69 - 78"}]}, "Mapping_Notes": {"Usage": "Prohibited", "Rationale": "This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.", "Comments": "Use this View or other Views to search and navigate for the appropriate weakness.", "Reasons": {"Reason": {"@Type": "View"}}}, "Notes": {"Note": [{"@Type": "Other", "xhtml:p": ["The top level categories in this view represent the individual tactics that are part of a secure-by-design approach to software development. The weaknesses that are members of each category contain information about how each is introduced relative to the software's architecture.", "Three different modes of introduction are used:"], "xhtml:ul": {"xhtml:li": ["Omission - caused by missing a security tactic when it is necessary.", "Commission - refers to incorrect choice of tactics which could result in undesirable consequences.", "Realization - appropriate security tactics are adopted but are incorrectly implemented."]}, "#text_blocks": ["The top level categories in this view represent the individual tactics that are part of a secure-by-design approach to software development. The weaknesses that are members of each category contain information about how each is introduced relative to the software's architecture.", "Three different modes of introduction are used:", "Omission - caused by missing a security tactic when it is necessary.", "Commission - refers to incorrect choice of tactics which could result in undesirable consequences.", "Realization - appropriate security tactics are adopted but are incorrectly implemented."]}, {"@Type": "Maintenance", "@Version": "5.0", "@ReleaseDate": "2026-10-28", "#text": "This view was originally created in 2017, but the CAWE\n\t\t\t   project ended, and this view was not actively\n\t\t\t   maintained afterward."}]}, "Content_History": {"Submission": {"Submission_Name": "Joanna C.S. Santos, Mehdi Mirakhorli", "Submission_Date": "2017-06-22", "Submission_Version": "2.12", "Submission_ReleaseDate": "2017-11-08", "Submission_Comment": "Provided the catalog, Common Architectural Weakness Enumeration (CAWE), and research papers for this view."}, "Modification": [{"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2018-03-27", "Modification_Version": "3.1", "Modification_ReleaseDate": "2018-03-27", "Modification_Comment": "updated Description, Other_Notes, View_Audience"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2020-02-24", "Modification_Version": "4.0", "Modification_ReleaseDate": "2020-02-24", "Modification_Comment": "updated Maintenance_Notes, View_Audience"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2023-06-29", "Modification_Version": "4.12", "Modification_ReleaseDate": "2023-06-29", "Modification_Comment": "updated Mapping_Notes"}, {"Modification_Name": "CWE Content Team", "Modification_Organization": "MITRE", "Modification_Date": "2026-10-28", "Modification_Version": "5.0", "Modification_ReleaseDate": "2026-10-28", "Modification_Comment": "updated Description, References, View_Audience"}]}, "entry_type": "View"}