MAINTENANCE NOTICE (UPDATE - 23 October 2017)
On 24 October 2017, we will be performing maintenance on this wiki between 7:59pm - 9:00pm EDT (23:59 UTC - 01:00 UTC 25 October 2017). Access during this period may be limited. The maintenance is to upgrade the version of the wiki. We don't expect any significant changes to the user experience based on this upgrade, and once it's complete, behavior should be the same as before (other than features and defect remediation from the update).
MAINTENANCE NOTICE:
For a few weeks beginning 23 October 2017, we will be performing occasional maintenance on this CERT Secure Coding wiki. This is a general notification announcing our maintenance plans.
We are planning the maintenance to minimize the impact to users. There will be several phases of maintenance, and we will provide more detailed information for each phase, such as expected maintenance periods and expected impacts. During the most significant periods of maintenance, we will provide a read-only version of the wiki, but not allow editing. That should only affect contributors, and not the vast majority of users of the system.
When the maintenance is complete, user accounts and histories will be retained for registered users. But, registered users will need to reset your password through the site’s “forgot password” mechanism. We will provide more information and instructions before and after that phase of the maintenance.
We expect all maintenance to be complete by early November. If you have any concerns, please send email to info@sei.cmu.edu, referencing the Secure Coding wiki.
--
The Java rules and recommendations in this wiki are a work in progress and reflect the current thinking of the secure coding community. Because this is a development website, many pages are incomplete or contain errors. As rules and recommendations mature, they are published in report or book form as official releases. These releases are issued as dictated by the needs and interests of the secure software development community.
Create a sign-in account if you want to comment on existing content. If you wish to be more involved and directly edit content on the site, you still need an account, but you'll also need to request edit privileges.
Front Matter
Content by Label showLabels false max 99 spaces @self showSpace false sort title reverse true cql label = "rule" and label = "front-matter" and space = currentSpace() labels +rule, +intro
Rules
Content by Label showLabels false max 99 spaces @self showSpace false sort title cql label = "rule-list" and label != "void" and space = currentSpace() labels +rule-list -void
Content by Label showLabels false max 99 spaces @self showSpace false sort title cql label = "rule" and label = "bm" and space = currentSpace() labels +rule, +bm
Front Matter
Content by Label showLabels false max 99 spaces @self showSpace false sort title reverse true cql label = "recommendation" and label = "front-matter" and space = currentSpace() labels +recommendation, +intro
Recommendations
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Content by Label showLabels false max 99 spaces @self showSpace false sort title cql label = "recommendation" and label = "bm" and space = currentSpace() labels +recommendation, +bm
| Panel | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||
There are two books available that cover Java: one for rules and the other for guidelines.
 Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs provides guidelines, recommendations, and examples to enable the creation of reliable, robust, fast, maintainable, and secure code. |
| Panel | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||
SCALe offers conformance testing of Java language software systems against the CERT Oracle Secure Coding Standard for Java. |
| Panel | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||
Contact us if you
|
| Panel | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||
We acknowledge the contributions of the following folks , and we look forward to seeing your name here as well. |