[Owasp-leaders] Consuming CWE XML file

[Juan Carlos Calderon Rojas]

Dinis/All

There is different "views" of CWE information (all, Developer, research, etc.), I found that Research view is the easier to understand and consume as it is the most close to a hierarchical view. Yet it required some work on normalization to make it really working for XSL transformation.

I did some transformation of this XML to JSON and then used visualization software to get the results I am attaching, I think  you all will like it :)

XML/XSL is very large for attaching it to an email, but I can share both, the normalized XML and a basic XML-to-HTML XSL if any of you is interested. Just contact me directly.

Regards,
Juan Carlos

From: owasp-leaders-bounces at lists.owasp.org [mailto:owasp-leaders-bounces at lists.owasp.org] On Behalf Of dinis cruz
Sent: Thursday, February 23, 2012 12:36 PM
To: owasp-leaders at lists.owasp.org
Cc: owasp-o2-platform at lists.owasp.org; OWASP .NET
Subject: [Owasp-leaders] Consuming CWE XML file

Anybody here as experience in consuming CWE data?

The CWE is actually available in a nice (big) XML file ( http://cwe.mitre.org/data/index.html ) with XSD included.

But I can't seem to find an XSL to transform it into other formats, namely Html. Any ideas of where it it?

BTW, there is a quite a number of mappings in CWE content to OWASP and OWAS Top 10.

Thanks

Dinis Cruz

Blog: http://diniscruz.blogspot.com
Twitter: http://twitter.com/DinisCruz
Web: http://www.owasp.org/index.php/O2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20120224/eb52aeb3/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CWECategoriesRelationship.PNG
Type: image/png
Size: 167586 bytes
Desc: CWECategoriesRelationship.PNG
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20120224/eb52aeb3/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: CWECategoriesIndentedTree.png
Type: image/png
Size: 318819 bytes
Desc: CWECategoriesIndentedTree.png
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20120224/eb52aeb3/attachment-0003.png>