Howard et al. [2] list 24 software

Howard et al. [2] list 24 software mistakes classified into 4 main
classes .
1. Web application mistakes such as SQL injection, XSS
vulnerabilities, etc
2. Implementation mistakes such as Buffer overflow, format string
problems, integer overflows, command injection, race condition,
etc
3. Cryptographic mistakes such as weak password-based system,
weak random numbers, and using cryptographic incorrectly.
4. Networking mistakes such as failing to protect network traffic,
improper use of PKI especially SSL, and trusting network name
resolution.

Results (Indonesian) 2:

Howard et al. [2] kesalahan daftar 24 software diklasifikasikan menjadi 4 utama
kelas.
1. Kesalahan aplikasi web seperti SQL injection, XSS
kerentanan, dll
2. Kesalahan penerapan seperti Buffer overflow, format string
masalah, integer overflow, injeksi perintah, kondisi ras,
dll
3. Kesalahan kriptografi seperti sistem yang lemah berbasis password,
nomor acak yang lemah, dan menggunakan kriptografi tidak benar.
4. Jaringan kesalahan seperti gagal untuk melindungi lalu lintas jaringan,
penyalahgunaan PKI terutama SSL, dan mempercayai nama jaringan
resolusi.