Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The following table lists map to the Java development guidelines in the book, "Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs", and states state their applicability to the development of Android applications.

Rules: Applicable to Android in Principle

Applicable means that the guideline can be applied to general Java platforms including Android.

MSC59-J. Limit the lifetime of sensitive data
SEC55-J. Ensure security-sensitive methods are called with validated argumentsIDS56-J. Prevent arbitrary file upload

Rules: Applicable to Android

...

Applicable in principle means that the guideline can be applied to Android but the examples shown in the guideline are not relevant to Android, and in some cases the guideline's full description also needs edits (the latter are provided in the Comments column). Not applicable means that the guideline cannot be applied to Android platforms.

...

Guideline

...

Applicable to Android Application Development?

...

Comments

...

section on each corresponding page).


FIO52-J. Do not store unencrypted sensitive information on the client side

...


...

IDS53-J. Prevent XPath Injection

...


...

MET52-J. Do not use the clone method to copy untrusted method parameters

...

http://developer.android.com/guide/topics/security/permissions.html

http://developer.android.com/guide/topics/manifest/uses-permission-element.html

Rules: Not Applicable to Android

Not applicable means that the guideline cannot be applied to Android platforms.
ERR54-J. Use a try-with-resources statement to safely handle closeable resources

SEC52-J. Do not expose methods that use reduced-security checks to untrusted code

...


SEC54-J. Create a secure sandbox using a security manager

...

Rules: Unknown Applicability to Android

OBJ56-J. Provide sensitive mutable classes with unmodifiable wrappers
SEC57-J. Do not let untrusted code misuse privileges of callback methods

Bibliography

[Long 2013]Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs

CERT Oracle Coding Standard for Java Image Added