Formally-Modeled-CWE

This is a repostitory containing the formal Alloy model of Common Weakness Enumerations (CWEs) described in the paper "Formally Modeled Common Weakness Enumerations (CWEs)." Note: figures from the paper are also included here.

CWEs modeled for various security tactics:

• Audit: 532, 778, 779
• Authenticate Actors: 258, 262, 287, 291, 307, 308, 521, 640, 620
• Authorize Actors: 268, 269, 276, 282, 283, 284, 434, 671
• Encrypt Data: 256, 260, 311, 312, 317, 319
• Limit Access: 250
• Manage User Sessions: 613
• Validate Inputs: 20