MITRE
- The MITRE Corporation is an American not-for-profit organization that operates federally funded research and development centers (FFRDCs) on behalf of U.S. government agencies, working across defense, cybersecurity, aviation, healthcare, and other public-interest domains.
- In security it is best known for maintaining widely adopted, freely available reference standards and knowledge bases that the industry conforms to.
Notable security standards and knowledge bases
- CWE - Common Weakness Enumeration, the taxonomy of software and hardware weakness types.
- CVE - Common Vulnerabilities and Exposures, identifiers for specific disclosed vulnerabilities.
- ATT&CK - adversary tactics and techniques knowledge base.
- CAPEC - Common Attack Pattern Enumeration and Classification.
- D3FEND - a knowledge graph of defensive countermeasures.