Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Removed links in page. They aren't needed for the book, and the wiki has the tree on the left.

...

A well-documented and enforceable coding standard is an essential element of coding in the C programming language. Coding standards encourage programmers to follow a uniform set of rules determined by the requirements of the project and organization rather than by the programmer’s familiarity. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes).

The following sections of the Introduction include information about how the material of this standard was developed and how to use it.

Scope

Audience

History

ISO/IEC TS 17961 C Secure Coding Rules

Tool Selection and Validation

Taint Analysis

Rules versus Recommendations

Conformance Testing

Development Process

Usage

System Qualities

Vulnerability Metric

How this Coding Standard is Organized

Automatically Generated Code

Government Regulations

Acknowledgements

 

CERT’s coding standards are being widely adopted by industry. Cisco Systems, Inc. announced its adoption of the CERT C Secure Coding Standard as a baseline programming standard in its product development in October 2011 at Cisco’s annual SecCon conference. Recently, Oracle has integrated all of CERT’s secure coding standards into its existing secure coding standards. This adoption is the most recent step of a long collaboration: CERT and Oracle previously worked together in authoring The CERT Oracle Secure Coding Standard for Java (Addison-Wesley, 2011).

...