CWE Compatibility Certificates Awarded

FOR IMMEDIATE RELEASE:

MCLEAN, Va., March 5, 2012 — The Common Weakness Enumeration (CWE) Program presented its first Certificates of Compatibility today during the 22nd Annual RSA Conference held February 27-March 2 in San Francisco, Calif.

In the eight years since CWE (the common naming standard for weaknesses in architecture, design, code, and implementation) has been in the public domain, more than 30 organizations (representing more than 50 products and services) from 9 countries have declared their intent to become CWE compatible. There were 13 products and services from 5 organizations in 3 countries that passed the final and most rigorous phase of the compatibility process and received certificates.

The specific products and services receiving certificates of CWE Compatibility were:

• CXSecurity's World Laboratory of Bugtraq 2 (WLB2)
• GrammaTech, Inc.'s CodeSonar
• Hewlett-Packard's HP Fortify Static Code Analyzer
• Hewlett-Packard's HP Fortify Real-Time Analyzer
• Hewlett-Packard's HP Fortify Software Security Center
• Hewlett-Packard's Fortify On Demand
• Hewlett-Packard's HP WebInspect
• Hewlett-Packard's HP Assessment Management Platform (AMP)
• Klocwork, Inc.'s Klocwork Insight
• Veracode's Veracode Static Analysis
• Veracode's Veracode Dynamic Analysis
• Veracode's Veracode Manual Testing
• Veracode's Veracode Analytics

According to Steve Christey, the CWE Technical Lead, "This group comes from a pool of organizations around the world that are pursuing compatibility. We congratulate these recipients, and look forward to seeing more organizations and their products join the effort to make software assurance more consistent, manageable, and measurable."

"These companies have demonstrated a commitment to providing their customers with application security solutions that leverage the best information and mitigation strategies available," said MITRE's Gary Gagnon, Vice President and Chief Security Officer. "By integrating CWE identifiers into their products, customers can feel secure using these companies' tools and service offerings."

"We're excited at the rate that industry is adopting the CWE naming standard," added Bob Martin, MITRE CWE Compatibility Lead. "In addition to the organizations that have publicly declared support for the CWE naming standard on the CWE web site, we've identified more than 40 other organizations from around the world that are actively working to incorporate CWE support into their capabilities."

About The MITRE Corporation

The MITRE Corporation is a not-for-profit organization that provides systems engineering, research and development, and information technology support to the government. It operates federally funded research and development centers for the Department of Defense, the Federal Aviation Administration, the Internal Revenue Service and Department of Veterans Affairs, the Department of Homeland Security, and the Administrative Office of the U.S. Courts, with principal locations in Bedford, Mass., and McLean, Va. To learn more, visit www.mitre.org.

Solutions That Make a Difference.®
Copyright © 1997-2013, The MITRE Corporation. All rights reserved.
MITRE is a registered trademark of The MITRE Corporation.
Material on this site may be copied and distributed with permission only.

Privacy Policy | Contact Us