The
SEI CERT Coding Standards are software
coding standards developed by the
CERT Coordination Center
The CERT Coordination Center (CERT/CC) is the coordination center of the computer emergency response team (CERT) for the Software Engineering Institute (SEI), a non-profit United States federally funded research and development center. The CERT ...
to improve the safety, reliability, and security of software systems. Individual standards are offered for
C,
C++,
Java
Java is one of the Greater Sunda Islands in Indonesia. It is bordered by the Indian Ocean to the south and the Java Sea (a part of Pacific Ocean) to the north. With a population of 156.9 million people (including Madura) in mid 2024, proje ...
,
Android OS
Android is an operating system based on a modified version of the Linux kernel and other open-source software, designed primarily for touchscreen-based mobile devices such as smartphones and tablets. Android has historically been developed b ...
, and
Perl
Perl is a high-level, general-purpose, interpreted, dynamic programming language. Though Perl is not officially an acronym, there are various backronyms in use, including "Practical Extraction and Reporting Language".
Perl was developed ...
.
Guidelines in the CERT C Secure Coding Standard are cross-referenced with several other standards including
Common Weakness Enumeration
Common Weakness Enumeration (CWE) logo
The Common Weakness Enumeration (CWE) is a category system for hardware and software weaknesses and vulnerabilities. It is sustained by a community project with the goals of understanding flaws in software an ...
(CWE) entries and
MISRA
Misra or Mishra may refer to:
* Motor Industry Software Reliability Association
* MISRA C, a software development standard for the C programming language
* Misra', half of a bayt in Arabic, Persian, Turkic and Urdu poetry
* Mishra or Misra, an ...
.
See also
*
Common Vulnerabilities and Exposures
The Common Vulnerabilities and Exposures (CVE) system, originally Common Vulnerability Enumeration, provides a reference method for publicly known information security, information-security vulnerability (computing), vulnerabilities and exposures ...
*
National Vulnerability Database
The National Vulnerability Database (NVD) is the U.S. government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability managemen ...
References
External links
*
CERT home page2016 SEI CERT C Coding Standard2016 SEI CERT C++ Coding Standard
Computer standards
C (programming language)
Carnegie Mellon University software
Computer network security
{{computing-stub