The
SEI CERT Coding Standards are software
coding standards
Coding conventions are a set of guidelines for a specific programming language that recommend programming style, practices, and methods for each aspect of a program written in that language. These conventions usually cover file organization, ind ...
developed by the
CERT Coordination Center
The CERT Coordination Center (CERT/CC) is the coordination center of the computer emergency response team (CERT) for the Software Engineering Institute (SEI), a non-profit United States federally funded research and development center. The CERT/C ...
to improve the safety, reliability, and security of software systems. Individual standards are offered for
C,
C++,
Java
Java (; id, Jawa, ; jv, ꦗꦮ; su, ) is one of the Greater Sunda Islands in Indonesia. It is bordered by the Indian Ocean to the south and the Java Sea to the north. With a population of 151.6 million people, Java is the world's mo ...
,
Android OS
Android is a mobile operating system based on a modified version of the Linux kernel and other open-source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. Android is developed by a consortium of dev ...
, and
Perl
Perl is a family of two High-level programming language, high-level, General-purpose programming language, general-purpose, Interpreter (computing), interpreted, dynamic programming languages. "Perl" refers to Perl 5, but from 2000 to 2019 it ...
.
Guidelines in the CERT C Secure Coding Standard are cross-referenced with several other standards including
Common Weakness Enumeration (CWE) entries and
MISRA Misra or Mishra may refer to:
* Motor Industry Software Reliability Association
* MISRA C, a software development standard for the C programming language
* Misra (poetry), a term meaning a line of a couplet, or verse, in Turkic, Arabic, Persian an ...
.
See also
*
Common Vulnerabilities and Exposures
The Common Vulnerabilities and Exposures (CVE) system provides a reference-method for publicly known information-security vulnerabilities and exposures. The United States' National Cybersecurity FFRDC, operated by The MITRE Corporation, mainta ...
*
National Vulnerability Database The National Vulnerability Database (NVD) is the U.S. government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, ...
References
External links
*
CERT home page2016 SEI CERT C Coding Standard2016 SEI CERT C++ Coding Standard
Computer standards
C (programming language)
Carnegie Mellon University software
Computer network security
{{computing-stub