SEI CERT Oracle Coding Standard for Java

Space shortcuts

Page tree

Versions Compared

Old Version 106

changes.mady.by.user Sandy Shrum

Saved on

compared with

New Version Current

changes.mady.by.user Robert Schiela

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Corrected "Create a sign-in account" link

Include Page
seccode:Secure Coding Space Homepage Notices
seccode:Secure Coding Space Homepage Notices


The Java rules and recommendations in this wiki are

Version 1.0 of The CERT Oracle Secure Coding Standard for Java is now available as a book from Addison-Wesley.

Development of the next version of the The CERT Oracle Coding Standard for Java is being performed here on the secure coding wiki. This version is

a work in progress and

reflects

reflect the current thinking of the secure coding community

. Subsequent official releases of this standard will be

. Because this is a development website, many pages are incomplete or contain errors. As rules and recommendations mature, they are published in report or book form as official releases. These releases are issued as dictated by the needs and interests of the secure software development community.

Java is a trademark or registered trademark of Oracle Corporation in the United States and other countries.

There is also a Japanese edition of the CERT Oracle Secure Coding Standard for Java, thanks to our partner JPCERT/CC.

Because this is a development website, many pages are incomplete or contain errors. If you are interested in furthering this effort, please comment on existing items or send recommendations to secure-coding at cert dot org. You can request privileges to

Create a sign-in account if you want to comment on existing content. If you wish to be more involved and directly edit content on the site

. If you decide to link to our guidelines, use the Tiny Link under Tools→Link to this Page..., as this URL will not change if the name of the guideline changes.

, you still need an account, but you'll also need to request edit privileges.   


Front Matter

Content by Label
showLabelsfalse
max99
spaces@self
showSpacefalse
sorttitle
reversetrue
cqllabel = "rule" and label = "front-matter" and space = currentSpace()
labels+rule, +intro

Rules

Content by Label
showLabelsfalse
max99
spaces@self
showSpacefalse
sorttitle
cqllabel = "rule-list" and label != "void" and space = currentSpace()
labels+rule-list -void

Content by Label
showLabelsfalse
max99
spaces@self
showSpacefalse
sorttitle
cqllabel = "rule" and label = "bm" and space = currentSpace()
labels+rule, +bm

Front Matter 

Content by Label
showLabelsfalse
max99
spaces@self
showSpacefalse
sorttitle
reversetrue
cqllabel = "recommendation" and label = "front-matter" and space = currentSpace()
labels+recommendation, +intro

Recommendations

Content by Label
showLabelsfalse
max99
spaces@self
showSpacefalse
sorttitle
cqllabel = "recommendation-list" and space = currentSpace()
labels+recommendation-list


Content by Label
showLabelsfalse
max99
spaces@self
showSpacefalse
sorttitle
cqllabel = "recommendation" and label = "bm" and space = currentSpace()
labels+recommendation, +bm

Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleSecure Java Coding Books

There are two books available that cover Java: one for rules and the other for guidelines.

Image Added

 

 

 

 

 

Section
Column
width10%

CERT Books

Image Removed

Image Removed

Column
width90%
Column
width90%

Java Coding Standards

The CERT Java Coding Standard is split into two sections: Java Rules and Java Coding Guidelines.

Section
Column
width10%

Image Removed

 

Column
width90%
The Java Rules are focused on normative guidelines which must be followed for secure coding best practices.

The CERT Oracle Secure Coding Standard for Java provides rules for Java Platform Standard Edition 6 and Java SE 7.

The rules on this wiki are being updated to support Java SE 8. Please create a sign-in account if you are interested in commenting or contributing to these guidelines.
Section
Column
width10%

Image Removed

Column
width90%

The Java Coding Guidelines  are focused on nonnormative guidelines which are recommended to follow for secure coding best practices, but may be considered more stylistic in their content. The recommendations on this wiki are being updated to support Java SE 8. Please create a sign-in account if you are interested in commenting or contributing to these guidelines.

 


Image AddedJava Coding Guidelines: 75 Recommendations for Reliable and Secure Programs provides guidelines, recommendations, and examples to enable the creation of reliable, robust, fast, maintainable, and secure code.
Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleSource Code Analysis Laboratory (SCALe)

SCALe offers conformance testing of Java language software systems against the CERT Oracle Secure Coding Standard for Java.

Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleContact Us

Contact us if you

  • have questions about the Secure Coding wiki
  • have recommendations for standards in development
  • want to request privileges to participate in standards development
Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleThank You!

We acknowledge the contributions of the following folks , and we look forward to seeing your name here as well.

Include Page
seccode:Understand the Difference Between Rules and Recommendations
seccode:Understand the Difference Between Rules and Recommendations

Info
titleLinking to Our Pages

Link to guidelines using the Tiny Link under Tools→Link to this Page... (This URL will not change if the name of the guideline changes.)   

Info
titleInformation for Editors
  • To eliminate a section from the lists above, label it section and void.
  • To have a section listed as a recommendation, label it section and recommendation.
  • To have a section listed as a rule, label it section and rule

  

CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office.
Java is a trademark or registered trademark of Oracle, Inc. in the US and other countries
  • .