Rules
| Content by Label | ||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Risk Assessment Summary
Rule | Severity | Likelihood | Detectable | Repairable |
|---|
Recommendations
MSC00-J. Eliminate class initialization cycles
MSC02-J. Be aware of the JVM Tool Interface
MSC03-J. Be aware of the Java Platform Debugger Architecture
MSC04-J. Be aware of JVM Monitoring and Managing
MSC05-J. Make sensitive classes noncloneable
MSC06-J. Avoid acyclic dependencies between packages
MSC07-J. Prefer using URIs to URLs
MSC08-J. Prefer using Iterators over Enumerations
MSC09-J. Avoid flaws in interfaces
Rules
MSC30-J. Generate truly random numbers
MSC31-J. Never hardcode sensitive information
MSC32-J. Treat the environment as untrusted and sanitize all inputs
Risk Assessment Summary
Recommendations
Recommendation | Severity | Likelihood | Remediation Cost | Priority | Level | |
|---|---|---|---|---|---|---|
| MSC00-J | Medium | low Likely | unlikely No | medium No | P2 P6 | L3 L2 |
| MSC01-J | Low | low Unlikely | unlikely Yes | high Yes | P1 P3 | L3 |
| MSC02-J | High | low Probable | unlikely No | medium No | P2 P6 | L3 L2 |
| MSC03-J | High | medium Probable | probable No | medium No | P8 P6 | L2 |
| MSC04-J | Low | Unlikely high | probable No | low No | P18 P1 | L1 L3 |
| MSC05-J | Low | medium Probable | probable No | medium No | P18 P2 | L1 L3 |
| MSC06-J | Low | TODO Probable TODO | No | TODO No | TODO P2 TODO | L3 |
| MSC07-J | medium Low | unlikely Unlikely | medium Yes | P4 | L3 | |
MSC08-J | low | unlikely | medium | P2 | L3 |
Rules
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
MSC30-J | medium | unlikely | medium | P4 | L3 |
| No | P2 | L3 |
...
EXC31-J. Handle checked exceptions that can be thrown within a finally block The CERT Sun Microsystems Secure Coding Standard for Java MSC00-J. Eliminate class initialization cycles