The CERT Oracle Secure Coding Standard for Java includes rules and recommended practices for secure programming in the Java Platform Standard Edition 6 environment. This is a work-in-progress and we actively seek your feedback and involvement in making this effort a success. We thank and acknowledge all the contributors. 00. Introduction 01. Runtime Environment (ENV) 02. Platform Security (SEC) 03. Declarations and Initialization (DCL) 04. Expressions (EXP) 05. Scope (SCP) 06. Integers (INT) 07. Floating Point (FLP) 08. Object Orientation (OBJ) 09. Input Output (FIO) 10. Input Validation and Data Sanitization (IDS) 11. Concurrency Visibility and Atomicity (CONVNA) 12. Locking (LCK) 13. Thread APIs (THI) 14. Thread Pools (TPS) 15. Thread-Safety Miscellaneous (TSM) 16. Methods (MET) 1317. Exceptional Behavior (EXC) 1418. Serialization (SER) 49. Miscellaneous (MSC) 99. The Void (VOID) AA. Java References BB. Definitions ZZ. General Comments CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office.
Java is a trademark or registered trademark of Oracle, Inc. in the US and other countries. | 
