Appendix
There are several web application security attack techniques that we are unable to classify at this time. Within the appendix, there is summarized documentation that describes some of these methodologies. These issues will be handled systematically in version 2 of the Threat Classification.

1.1 HTTP Response Splitting

1.2 Web Server/Application Fingerprinting