Secure Coding
Easily avoided software defects are a primary cause of commonly
exploited software vulnerabilities. CERT Program staff has observed, through
an analysis of thousands of vulnerability reports, that most
vulnerabilities stem from a relatively small number of common
programming errors. By identifying insecure coding practices and
developing secure alternatives, software developers can take practical
steps to reduce or eliminate vulnerabilities before deployment.
As part of the CERT Secure Coding Initiative, members of the Secure
Coding team work with software developers and software development
organizations to reduce vulnerabilities resulting from coding errors
before they are deployed. We strive to identify common programming
errors that lead to software vulnerabilities, establish standard
secure coding standards, educate software developers, and to advance
the state of the practice in secure coding.
|
|
