Secure Coding mailing list archives

Language agnostic secure coding guidelines/standards?


From: coley at linus.mitre.org (Steven M. Christey)
Date: Mon, 17 Nov 2008 16:49:56 -0500 (EST)


The CWE Research view (CWE-1000) is language-neutral at its higher-level
nodes, and decomposes in some areas into language-specific constructs.
Early experience suggests that this view is not necessarily
developer-friendly, however, because it's not organized around the types
of concepts that developers typically think in.

http://cwe.mitre.org/data/definitions/1000.html

(click the Graph tab on the top right of the page to see the breakdown)

Obviously the CWE is a badness-ometer-pedia but suggests some areas that
your guidelines would hopefully address.

- Steve


Current thread: