Page History

...

A well-documented and enforceable coding standard is an essential element of coding in the C programming language. Coding standards encourage programmers to follow a uniform set of rules determined by the requirements of the project and organization rather than by the programmer’s familiarity. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes).

Acknowledgements

Scope

Audience

History

ISO/IEC TS 17961 C Secure Coding Rules

Tool Selection and Validation

Taint Analysis

Rules versus Recommendations

Conformance Testing

Development ProcessDeprecations

Usage

System Qualities

Vulnerability Metric

Automatically Generated Code

Tool Selection and Validation

Taint Analysis

Conformance Testing

How this Coding Standard is Organized

Automatically Generated Code

Government Regulations

ISO/IEC TS 17961 C Secure Coding RulesAcknowledgements

Guidelines for Wiki Contributors

Deprecations

CERT’s coding standards are being widely adopted by industry. Cisco Systems, Inc. announced its adoption of the CERT C Secure Coding Standard as a baseline programming standard in its product development in October 2011 at Cisco’s annual SecCon conference. Recently, Oracle has integrated all of CERT’s secure coding standards into its existing secure coding standards. This adoption is the most recent step of a long collaboration: CERT and Oracle previously worked together in authoring The CERT Oracle Secure Coding Standard for Java (Addison-Wesley, 2011).

...