The product's architecture contains too many - or too few - horizontal layers.
This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.
While the interpretation of "expected range" may vary for each product or developer, CISQ recommends a default minimum of 4 layers and maximum of 8 layers.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| ChildOf | Discouraged | P | 710 | Improper Adherence to Coding Standards |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1006 | Bad Coding Practices |
| MemberOf | Prohibited | C | 1130 | CISQ Quality Measures (2016) - Maintainability |
| MemberOf | Prohibited | C | 1412 | Comprehensive Categorization: Poor Coding Practices |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | BS | BOSS-310 | Reduce Maintainability (impact) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1006 | Bad Coding Practices |
| Scope | Likelihood | Impact | Note |
|---|---|---|---|
| Other | N/A | Reduce Maintainability | N/A |
N/A
| Reference | Description |
|---|
| Ordinality | Description |
|---|---|
| Indirect | N/A |
This entry is primarily a quality issue with no direct security implications.
Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| OMG ASCMM | ASCMM-MNT-9 | N/A | N/A |
| ID | Name |
|---|