Working Groups (WGs) and Special Interest Groups (SIGs)You may request to join any WG, SIG, or Email Collaboration List included on this page by emailing cwe@mitre.org. We look forward to hearing from you! CWE Community WGs and SIGsArtificial Intelligence Working Group (AI WG)The AI WG was established by CWE™ and CVE™ community stakeholders to identify and address gaps in the CWE corpus where AI-related weaknesses are not adequately covered, and work collaboratively to fix them. Discussion Forum | GitHub Repository | Request Information/Join Cross-Domain Special Interest Group (XD-SIG)The CWE XD-SIG is intended to be an open, collaborative forum that brings together contributors from across industry, government, academia, and the cybersecurity community. By unifying previous domain-specific efforts, the XD-SIG aims to: improve the usability and accessibility of the CWE corpus; promote accurate and precise use of CWE in vulnerability root cause mapping; promote broader industry adoption of CWE; support continuous improvement of CWE content and processes; and enhance how weaknesses are defined, presented, and mapped across software, hardware, AI, and other domains. Request Information/Join Cross-Domain Special Interest Group (XD-SIG) Hardware CWE Special Interest Group (HW CWE SIG)The HW CWE SIG offers a forum for researchers and representatives from organizations operating in hardware design, manufacturing, and security to interact, share opinions and expertise, and leverage each other’s experiences in supporting the continued growth and adoption of CWE as a common language for defining hardware security weaknesses. The objective of the HW CWE SIG is to establish a stakeholder community for discussing HW CWE content and explore further cross-organizational collaboration opportunities. Fact Sheet | GitHub Repository | Request Information/Join Email Collaboration ListsWhile there is support for ad-hoc working meetings, the following function primarily as mailing lists. ICS/OT Special Interest Group (ICS/OT SIG)The ICS/OT SIG email discussion list offers a forum for researchers and technical representatives from organizations operating in industrial control systems (ICS) and operational technology (OT) design, manufacturing, and security to interact, share opinions and expertise, and leverage each other’s experiences in supporting continued growth and adoption of CWE as a common language for defining ICS/OT security weaknesses. Fact Sheet | GitHub Repository | Join Email List REST API Working Group (REST API WG)The REST API WG collaborates via the REST API WG email discussion list. The objective of the REST API WG is to ease the interface between security software and hardware architects, EDA tool developers, verification engineers concerned about mitigating security risks in their products; and the databases themselves, by designing a RESTful API. The CWE REST API is available here. Fact Sheet | GitHub Repository | Join Email List CWE Research DiscussionThe CWE Research Discussion Email List is a lightly moderated public forum to discuss CWE definitions, suggest potential definition expansion(s), and/or submit new definitions. General discussion of the vulnerabilities themselves is also welcome. |
