Secure Coding
Easily avoided software defects are a primary cause of commonly
exploited software vulnerabilities. The CERT/CC has observed, through
an analysis of thousands of vulnerability reports, that most
vulnerabilities stem from a relatively small number of common
programming errors. By identifying insecure coding practices and
developing secure alternatives, software developers can take practical
steps to reduce or eliminate vulnerabilities before deployment.
The CERT Secure Coding Initiative works with software developers and
software development organizations to reduce vulnerabilities
resulting from coding errors before they are deployed. We work to
identify common programming errors that lead to software
vulnerabilities, establish standard secure coding standards, educate
software developers, and to advance the state of the practice in
secure coding.
|
|
