The CERT Oracle Secure Coding Standard for Java

CERT Books

The CERT Oracle Secure Coding Standard for Java includes rules and recommended practices for secure programming for Java Platform Standard Edition 6 and Java SE 7. Version 1.0 of the standard has been completed and is now ready for review.

Preface

Acknowledgments

Introduction

• Page:
  1. Security
• Page:
  2. Defensive Programming
• Page:
  3. Reliability
• Page:
  4. Program Understandability
• Page:
  5. Programmer Misconceptions
• Page:
  Rule 00. Input Validation and Data Sanitization (IDS)
• Page:
  Rule 01. Declarations and Initialization (DCL)
• Page:
  Rule 02. Expressions (EXP)
• Page:
  Rule 03. Numeric Types and Operations (NUM)
• Page:
  Rule 04. Characters and Strings (STR)
• Page:
  Rule 05. Object Orientation (OBJ)
• Page:
  Rule 06. Methods (MET)
• Page:
  Rule 07. Exceptional Behavior (ERR)
• Page:
  Rule 08. Visibility and Atomicity (VNA)
• Page:
  Rule 09. Locking (LCK)
• Page:
  Rule 10. Thread APIs (THI)
• Page:
  Rule 11. Thread Pools (TPS)
• Page:
  Rule 12. Thread-Safety Miscellaneous (TSM)
• Page:
  Rule 13. Input Output (FIO)
• Page:
  Rule 14. Serialization (SER)
• Page:
  Rule 15. Platform Security (SEC)
• Page:
  Rule 16. Runtime Environment (ENV)
• Page:
  Rule 17. Java Native Interface (JNI)
• Page:
  Rule 49. Miscellaneous (MSC)

AA. References

BB. Glossary

Analyzers

Eliminated Sections

CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office.
Java is a trademark or registered trademark of Oracle, Inc. in the US and other countries.