The CERT Oracle Secure Coding Standard for Java

CERT Books

CERT Websites
CERT
Secure Coding
Tech Tips

Related Sites
Build Security In

The CERT Oracle Secure Coding Standard for Java includes rules and recommended practices for secure programming in the Java Platform Standard Edition 6 environment. This is a work-in-progress and we actively seek your feedback and involvement in making this effort a success. We thank and acknowledge all the contributors.

Introduction

Runtime Environment (ENV)

Platform Security (SEC)

Declarations and Initialization (DCL)

Expressions (EXP)

Integers (INT)

Floating Point (FLP)

Object Orientation (OBJ)

Input Output (FIO)

Input Validation and Data Sanitization (IDS)

Visibility and Atomicity (VNA)

Locking (LCK)

Thread APIs (THI)

Thread Pools (TPS)

Thread-Safety Miscellaneous (TSM)

Methods (MET)

Exceptional Behavior (EXC)

Serialization (SER)

Miscellaneous (MSC)

• Page:
  1. Security
• Page:
  2. Defensive Programming
• Page:
  3. Reliability
• Page:
  4. Program Understandability
• Page:
  5. Programmer Misconceptions
• Page:
  Rule 00. Input Validation and Data Sanitization (IDS)
• Page:
  Rule 01. Declarations and Initialization (DCL)
• Page:
  Rule 02. Expressions (EXP)
• Page:
  Rule 03. Numeric Types and Operations (NUM)
• Page:
  Rule 04. Characters and Strings (STR)
• Page:
  Rule 05. Object Orientation (OBJ)
• Page:
  Rule 06. Methods (MET)
• Page:
  Rule 07. Exceptional Behavior (ERR)
• Page:
  Rule 08. Visibility and Atomicity (VNA)
• Page:
  Rule 09. Locking (LCK)
• Page:
  Rule 10. Thread APIs (THI)
• Page:
  Rule 11. Thread Pools (TPS)
• Page:
  Rule 12. Thread-Safety Miscellaneous (TSM)
• Page:
  Rule 13. Input Output (FIO)
• Page:
  Rule 14. Serialization (SER)
• Page:
  Rule 15. Platform Security (SEC)
• Page:
  Rule 16. Runtime Environment (ENV)
• Page:
  Rule 17. Java Native Interface (JNI)
• Page:
  Rule 49. Miscellaneous (MSC)

The Void (VOID)

AA. Bibliography

BB. Definitions

CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office.
Java is a trademark or registered trademark of Oracle, Inc. in the US and other countries.