The CERT Oracle Secure Coding Standard for Java
An essential element of secure coding in the Java programming language is a well-documented and enforceable coding standard. Coding standards encourage programmers to follow a uniform set of rules determined by the requirements of the project and organization, rather than by the programmer¡¯s familiarity or preference. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes).
The CERT® Oracle® Secure Coding Standard for Java™ provides rules designed to eliminate insecure coding practices that can lead to exploitable vulnerabilities. Application of the standard¡¯s guidelines will lead to higher-quality systems¨Crobust systems that are more resistant to attack. Such guidelines are required for the wide range of products coded in Java¨Cfor devices such as PCs, game players, mobile phones, home appliances, and automotive electronics.
After a high-level introduction to Java application security, seventeen consistently organized chapters detail specific rules for key areas of Java development. For each area, the authors present noncompliant examples and corresponding compliant solutions, show how to assess risk, and offer references for further information. Each rule is prioritized based on the severity of consequences, likelihood of introducing exploitable vulnerabilities, and cost of remediation.
The standard provides secure coding rules for the Java SE 6 Platform including the Java programming language and libraries, and also addresses new features of the Java SE 7 Platform. It describes language behaviors left to the discretion of JVM and compiler implementers, guides developers in the proper use of Java¡¯s APIs and security architecture, and considers security concerns pertaining to standard extension APIs (from the javax package hierarchy).The standard covers security issues applicable to these libraries: lang, util, Collections, Concurrency Utilities, Logging, Management, Reflection, Regular Expressions, Zip, I/O, JMX, JNI, Math, Serialization, and JAXP.
Jetzt lerne ich Java 7 - komplettes Starterkit fur den erfolgreichen Einstie
Effective Unit Testing: A guide for Java Developers
Enterprise OSGi in Action: With examples using Apache Aries
Spring im Einsatz, 2 Auflage
Starting Out with Java: From Control Structures through Objects (5th Edition
SCBCD Exam Study Kit: Java Business Component Developer Certification for EJ
Building Scalable and High-Performance Java Web Applications Using J2EE Tech
Java 2 Primer Plus
Teach Yourself Java in 21 Days
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.
Programming and Problem Solving with Jav(2102)
Ivor Horton's Beginning Java(1863)
Operating System Concepts with Java(1671)
Effective Unit Testing: A guide for Java(804)
Bruce Tate, Bitter Java(637)
Spring Security 3(595)
Enterprise OSGi in Action: With examples(358)
Spring im Einsatz, 2 Auflage(281)
Jetzt lerne ich Java 7 - komplettes Star(173)
Java: The Complete Reference, J2SE 5 Edi(28746)
Java The Complete Reference, 8th Edition(14981)
Data Structures and Algorithms in Java(14263)
Pro Spring 3(14185)
Sams Teach Yourself Java 6 in 21 Days (5(11374)
Hibernate In Action(11133)
Data Structures and Algorithms in Java, (7980)
Java The Complete Reference, Seventh Edi(7965)
Beginning Java 7(7617)
Absolute Java (5th Edition)(7206)
J2EE Web Services(6803)
Beginning Programming with Java For Dumm(6513)
Java 7 for Absolute Beginners (For Absol(6318)
jQuery For Dummies(6279)
Beginning J2ME: From Novice to Professio(5988)