CSA ISO/IEC TR 24772
Information technology — Programming languages — Guidance to avoiding vulnerabilities in programming languages through language selection and use
| Organization: | CSA |
| Publication Date: | 1 January 2015 |
| Status: | active |
| Page Count: | 349 |
| ICS Code (Languages used in information technology): | 35.060 |
scope:
This Technical Report specifies software programming language vulnerabilities to be avoided in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, this guidance is applicable to the software developed, reviewed, or maintained for any application.
Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.
Document History