The following rules and recommended practices are specific only to the Android platform. They do not apply to the development of Java programs for other platforms and Android. (The full set of Android -relevant rules and guidelines are here.) The term sensitive incorporates the Java glossary definition of sensitive data, as well as the Android concept of permission-protected.
Risk Assessment Summary
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
DRD00-J | high | probable | medium | P12 | L1 |
DRD01-J | high | probable | low | P18 | L1 |
DRD02-J | high | probable | high | P6 | L2 |
DRD03-J | High | Probable | Medium | P12 | L1 |
DRD04-J | High | Probable | Medium | P12 | L1 |
DRD08-J | High | Probable | Low | P18 | L1 |
| DRD09-J | High | Probable | Medium | P12 | L1 |
ENV05-J. Do not deploy an application that can be remotely monitored The CERT Oracle Secure Coding Standard for Java MSC00-J. Use SSLSocket rather than Socket for secure data exchange