Java Coding Guidelines

CERT Books

CERT Websites
CERT
Secure Coding
Tech Tips

Related Sites
Build Security In

The Java Coding Guidelines includes recommended practices for secure programming in the Java Platform Standard Edition 6 environment. This is a work-in-progress and we actively seek your feedback and involvement in making this effort a success. We thank and acknowledge all the contributors.

Preface

• Page:
  1. Security
• Page:
  2. Defensive Programming
• Page:
  3. Reliability
• Page:
  4. Program Understandability
• Page:
  5. Programmer Misconceptions
• Page:
  Rule 00. Input Validation and Data Sanitization (IDS)
• Page:
  Rule 01. Declarations and Initialization (DCL)
• Page:
  Rule 02. Expressions (EXP)
• Page:
  Rule 03. Numeric Types and Operations (NUM)
• Page:
  Rule 04. Characters and Strings (STR)
• Page:
  Rule 05. Object Orientation (OBJ)
• Page:
  Rule 06. Methods (MET)
• Page:
  Rule 07. Exceptional Behavior (ERR)
• Page:
  Rule 08. Visibility and Atomicity (VNA)
• Page:
  Rule 09. Locking (LCK)
• Page:
  Rule 10. Thread APIs (THI)
• Page:
  Rule 11. Thread Pools (TPS)
• Page:
  Rule 12. Thread-Safety Miscellaneous (TSM)
• Page:
  Rule 13. Input Output (FIO)
• Page:
  Rule 14. Serialization (SER)
• Page:
  Rule 15. Platform Security (SEC)
• Page:
  Rule 16. Runtime Environment (ENV)
• Page:
  Rule 17. Java Native Interface (JNI)
• Page:
  Rule 49. Miscellaneous (MSC)

The Void (VOID)

AA. References

BB. Definitions

CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office.
Java is a trademark or registered trademark of Oracle, Inc. in the US and other countries.