Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Pruned and updated News panel.

Include Page
Secure Coding Space Homepage Notices
Secure Coding Space Homepage Notices

Welcome

This site supports the development of coding standards for commonly used programming languages such as C, C++, Java, and Perl, and the Android platform. These standards are developed through a broad-based community effort by members of the software development and software security communities.

For more information about this project and to see tips on how to contribute, please see the Development Guidelines.

Downloads

Standards Development Area

The following development areas enable you to learn about and contribute to secure coding standards for commonly used programming languages C, C++, Java, and Perl. Contact us to comment on existing items, submit recommendations, or request privileges to directly edit content on this site.

Section
bordertrue
Column
width50%

 

SEI CERT C Coding Standard



SEI CERT C++ Coding Standard        

  


Android TM   Secure Coding Standard     



Column
width50%

SEI CERT Oracle Coding Standard for Java




SEI CERT Perl Coding Standard






The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License.

Android is a trademark of Google Inc.

Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleNews

September 2018: The Summer 2018 Edition of the Secure Coding newsletter was published on 4 September 2018.

August 2018: SCALe has been released open-source as a new project on GitHub. This is the first time that SCALe has been released to the public.  This initial release is SCALe 2.1.4.0.

December 2017: The Fall 2017 Edition of the Secure Coding newsletter was published on 20 December 2017.

November 2017: Lori Flynn and Will Klieber April 2018: Lori Flynn authored a blog post on Automated Detection of Information Leaks in Mobile Devices.

April 2017: David Svoboda writes in the SEI Blog about the CERT C++ Secure Coding Guidelines.

March 2017: The SEI CERT C++ Coding Standard (2016 Edition) is released. 

September 2016: Aaron Ballman writes in the SEI Blog about newly developed rules for Secure Coding in C++11 and C++14 .

August 2016: The Secure Coding in Java certificate program becomes available.

June 2016: The SEI CERT C Coding Standard (2016 Edition) is released.

Static Analysis Alert Test Suites as a Source of Training Data for Alert Classifiers.

February 2018: David Svoboda talks about SCALe in an SEI Cyber Minute.

Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleSecure Coding Newsletter

The Secure Coding eNewsletter provides timely information about CERT secure coding standards.

The Summer 2018 Edition of the Secure Coding newsletter was published on 4 September 2018. 

Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleMore Info...

The Top 10 Secure Coding Practices provides some language-independent recommendations.

Visit the Secure Coding section of the SEI's Digital Library for the latest publications written by the Secure Coding team.

Learn more about CERT Secure Coding Courses and the Secure Coding Professional Certificate Program.

Panel
borderColor#B0B1BA
bgColor#fafafa
titleColor#ffffff
borderWidth1
titleBGColor#B0B1BA
borderStylesolid
titleContact Us

Contact us if you

  • have questions about the Secure Coding wiki
  • have recommendations for standards in development
  • want to request privileges to participate in standards development