SFPM
Software Fault Pattern Metamodel
One of the key steps in preventing cyber attacks is to collect, analyze and efficiently manage knowledge about exploitable weaknesses. Common Weakness Enumeration (CWE) catalog describes a large collection of weaknesses building upon proposals by various researchers; however, all existing classifications remain informal and resist automation. This specification describes the Software Fault Pattern (SFP) approach to building machine-consumable knowledge of software weaknesses. In the SFP approach, weaknesses are not studied as some abstract objects; instead, the SFP approach focuses on computations that exhibit certain "faults". The objective of the SFP approach is to reveal the invariants of such computations, and to provide a framework for describing and cataloguing "faults" in terms of these invariants. This specification uses the term "software fault" as it refers to an identified - adjudged or hypothesized - cause of a failure of the service performed by a piece of software under investigation. SFP apparatus is developed to provide formal, constructive definitions to the class of software faults that can be identified in the software alone. To describe invariants in terms of software, the SFP approach uses ISO/OMG Knowledge Discovery Metamodel (KDM) as a language-neutral, vendor-independent vocabulary for describing software facts. With KDM as the foundation, the SFP framework provides an apparatus for formally specifying invariants of computations; describing and cataloguing faults as invariants of computations. The SFP apparatus involves specification of the SFP Metamodel (SFPM) and the SFPM XMI schema. SFPM XMI is a common interoperable format for representing machine-consumable content related to software faults, their formal semantics and their mappings to the elements of the Common Weakness Enumeration (CWE) catalog.
Machine Readable Files
| OMG File ID | URL | Format | Description | Appears in |
|---|---|---|---|---|
| ptc/22-03-02 | ptc/22-03-02.xsd | XML Schema | SFPM 1.0 XML schema file updated | 1.0 |
| ptc/22-02-15 | ptc/22-02-15.ecore | Eclipse ecore | SFPM Ecore file | 1.0 |
| ptc/22-02-14 | SFPM/20220201/SFPM.xml | XML | SFPM XMI file | 1.0 |
Links
- Members Only
- https://www.omg.org/members/spec/SFPM/machine-readable
- Contact:
- Send a question ⓘ