The CERT Sun Microsystems Secure Coding Standard for Java

Coding Standards
Overview
C Language
C++
Java

CERT Websites
CERT
Secure Coding
Tech Tips

Related Websites
Build Security In

Related Sites

The CERT Sun Microsystems Secure Coding Standard for Java includes rules and recommended practices for secure programming in the Java Platform Standard Edition 6 environment. This is a work-in-progress and we actively seek your feedback and involvement in making this effort a success. We thank and acknowledge all the contributors.

00. Introduction

01. Runtime Environment (ENV)

02. Platform Security (SEC)

03. Declarations and Initialization (DCL)

04. Expressions (EXP)

05. Scope (SCP)

06. Integers (INT)

07. Floating Point (FLP)

08. Object Orientation (OBJ)

09. Input Output (FIO)

10. Input Validation and Data Sanitization (IDS)

11. Concurrency (CON)

12. Methods (MET)

13. Exceptional Behavior (EXC)

14. Serialization (SER)

49. Miscellaneous (MSC)

99. The Void (VOID)

AA. Java References

BB. Definitions

ZZ. General Comments

CERT and CERT Coordination Center are registered in the U.S. Patent and Trademark Office.
Java is a trademark or registered trademark of Sun Microsystems, Inc. in the US and other countries.