Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

An essential element of secure coding in the Perl programming language is well-documented and enforceable coding standards. Coding standards encourage programmers to follow a uniform set of rules and guidelines determined by the requirements of the project and organization , rather than by the programmer's familiarity or preference. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes).

The CERT Perl Secure Coding Standard provides rules and recommendations for secure coding in the Perl programming language. The goal of these rules and recommendations is to eliminate insecure coding practices and undefined behaviors that can lead to exploitable vulnerabilities. The application of the secure coding standard will lead to higher-quality systems that are robust and more resistant to attack.

Scope

Tool Selection and Validation

Rules Versus versus Recommendations

Development Process

Usage

System Qualities

Vulnerability Metric

Risk AssessmentAutomatically Generated Code

VOID Vulnerability Metric

Source Code Validation

Tool Selection and Validation

CERT Perl Secure Coding Standard      CERT Perl Secure Coding Standard      Image RemovedAutomatically Generated Code