This list of resources that might be useful for improving software security is provided for information and convenience only. As part of a Federally Funded Research and Development Center (FFRDC), the CERT Coordination Center cannot endorse any products, services, or organizations.

Standards and Guidelines

• TIOBE Coding Standard Methodology from TIOBE Software
• Secure Coding Guidelines for the Java Programming Language, version 3.0 from Oracle
• ISO/IEC JTC1/SC22/WG14 - C
  The programming language international standardization working group offers a wide range of information, including
  • Specification for Safer, More Secure C Library Functions - a draft technical report
  • ISO/IEC 9899:TC2 - Programming languages - C - the current C programming language standard