The CERT® Oracle® Secure Coding Standard for Javaâ„¢ provides rules designed to eliminate insecure coding practices that can lead to exploitable vulnerabilities. Application of the standard’s guidelines will lead to higher-quality systemsâ€"robust systems that are more resistant to attack. Such guidelines are required for the wide range of products coded in Javaâ€"for devices such as PCs, game players, mobile phones, home appliances, and automotive electronics.
After a high-level introduction to Java application security, seventeen consistently organized chapters detail specific rules for key areas of Java development. For each area, the authors present noncompliant examples and corresponding compliant solutions, show how to assess risk, and offer references for further information. Each rule is prioritized based on the severity of consequences, likelihood of introducing exploitable vulnerabilities, and cost of remediation.
The standard provides secure coding rules for the Java SE 6 Platform including the Java programming language and libraries, and also addresses new features of the Java SE 7 Platform. It describes language behaviors left to the discretion of JVM and compiler implementers, guides developers in the proper use of Java’s APIs and security architecture, and considers security concerns pertaining to standard extension APIs (from the javax package hierarchy).The standard covers security issues applicable to these libraries: lang, util, Collections, Concurrency Utilities, Logging, Management, Reflection, Regular Expressions, Zip, I/O, JMX, JNI, Math, Serialization, and JAXP.
- Series: SEI Series in Software Engineering
- Paperback: 744 pages
- Publisher: Addison-Wesley Professional; 1 edition (September 18, 2011)
- Language: English
- ISBN-10: 0321803957
- ISBN-13: 978-0321803955
Download The CERT Oracle Secure Coding Standard for Java eBook:
Download The CERT Oracle Secure Coding Standard for Java eBook PDF File [1]
Download The CERT Oracle Secure Coding Standard for Java eBook EPUB File
Download The CERT Oracle Secure Coding Standard for Java eBook MOBI File
Download eBook Collections [2]
Links
- ^ Download The CERT Oracle Secure Coding Standard for Java eBook PDF File (joinfile.com)
- ^ Download eBook Collections (joinfile.com)
No comments:
Post a Comment