The following rules are specific only to the Android platform. They do not apply to the development of Java programs for other platforms and Android. (Those plus these DRD rules, along with relevant Java development guidelines, are here.) The term sensitive incorporates the Java glossary definition of sensitive data, as well as the Android concept of permission-protected.
Risk Assessment Summary
Rule | Severity | Likelihood | Remediation Cost | Priority | Level |
|---|---|---|---|---|---|
DRD00-J | high | probable | medium | P12 | L1 |
DRD01-J | high | probable | low | P18 | L1 |
DRD02-J | high | probable | high | P6 | L2 |
DRD03-J | High | Probable | Medium | P12 | L1 |
DRD04-J | High | Probable | Medium | P12 | L1 |
DRD08-J | High | Probable | Low | P18 | L1 |
| DRD09-J | High | Probable | Medium | P12 | L1 |
ENV05-J. Do not deploy an application that can be remotely monitored The CERT Oracle Secure Coding Standard for Java MSC00-J. Use SSLSocket rather than Socket for secure data exchange