Goodreads helps you keep track of books you want to read.

Start by marking “The CERT Oracle Secure Coding Standard for Java” as Want to Read:

Other editions

Enlarge cover

Rate this book

Clear rating

1 of 5 stars 2 of 5 stars 3 of 5 stars 4 of 5 stars 5 of 5 stars

Open Preview

The CERT Oracle Secure Coding Standard for Java

by Fred Long, Dhruv Mohindra, Robert C. Seacord, Dean F. Sutherland, David Svoboda

3.71 · Rating Details · 7 Ratings · 1 Review

In the Java world, security is not viewed as an add-on a feature. It is a pervasive way of thinking. Those who forget to think in a secure mindset end up in trouble. But just because the facilities are there doesn t mean that security is assured automatically. A set of standard practices has evolved over the years. The Secure(r) Coding(r) Standard for Java is a compend
In the Java world, security is not viewed as an add-on a feature. It is a pervasive way of thinking. Those who forget to think in a secure mindset end up in trouble. But just because the facilities are there doesn t mean that security is assured automatically. A set of standard practices has evolved over the years. The Secure(r) Coding(r) Standard for Java is a compendium of these practices. These are not theoretical research papers or product marketing blurbs. This is all serious, mission-critical, battle-tested, enterprise-scale stuff. James A. Gosling, Father of the Java Programming Language An essential element of secure coding in the Java programming language is a well-documented and enforceable coding standard. Coding standards encourage programmers to follow a uniform set of rules determined by the requirements of the project and organization, rather than by the programmer s familiarity or preference. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes). The CERT(r) Oracle(r) Secure Coding Standard for Java provides rules designed to eliminate insecure coding practices that can lead to exploitable vulnerabilities. Application of the standard s guidelines will lead to higher-quality systems robust systems that are more resistant to attack. Such guidelines are required for the wide range of products coded in Java for devices such as PCs, game players, mobile phones, home appliances, and automotive electronics. After a high-level introduction to Java application security, seventeen consistently organized chapters detail specific rules for key areas of Java development. For each area, the authors present noncompliant examples and corresponding compliant solutions, show how to assess risk, and offer references for further information. Each rule is prioritized based on the severity of consequences, likelihood of introducing exploitable vulnerabilities, and cost of remediation. The standard provides secure coding rules for the Java SE 6 Platform including the Java programming language and libraries, and also addresses new features of the Java SE 7 Platform. It describes language behaviors left to the discretion of JVM and compiler implementers, guides developers in the proper use of Java s APIs and security architecture, and considers security concerns pertaining to standard extension APIs (from the javax package hierarchy).The standard covers security issues applicable to these libraries: lang, util, Collections, Concurrency Utilities, Logging, Management, Reflection, Regular Expressions, Zip, I/O, JMX, JNI, Math, Serialization, and JAXP." ...more

Paperback, 699 pages

Published September 18th 2011 by Addison-Wesley Professional (first published September 6th 2011)

More Details... edit details

Get a copy:

Or buy for

Friend Reviews

To see what your friends thought of this book, please sign up.

Reader Q&A

To ask other readers questions about The CERT Oracle Secure Coding Standard for Java, please sign up.

Be the first to ask a question about The CERT Oracle Secure Coding Standard for Java

Lists with This Book

This book is not yet featured on Listopia. Add this book to your favorite list »

Community Reviews

(showing 1-30 of 35)

filter | sort: default (?) | Rating Details

Dec 18, 2013 Pırıl rated it it was amazing

This book must be read by Java Application Developers who cares about vulnerability.

flag Like · see review

Paulo Salgado marked it as to-read
Aug 04, 2016

David marked it as to-read
Jul 09, 2016

Wayne marked it as to-read
Jun 28, 2016

Marcelo Cenerino marked it as to-read
Apr 20, 2016

Denis marked it as to-read
Apr 16, 2016

Norbert Sram marked it as to-read
Feb 09, 2016

softwareresearchwork is currently reading it
Dec 26, 2015

Steve Taylor rated it really liked it
Jun 04, 2015

Pascal Fux marked it as to-read
Feb 28, 2015

Hassan marked it as to-read
Feb 14, 2015

Mostafa Siraj marked it as to-read
Jan 20, 2015

Raed marked it as to-read
Apr 25, 2016

Narendra Shinde marked it as to-read
Nov 27, 2014

Alexander marked it as to-read
Oct 28, 2014

Ivan Nikolaev marked it as to-read
Sep 05, 2014

Ben added it
Jun 16, 2014

Kiril marked it as to-read
May 13, 2014

Alik marked it as to-read
May 10, 2014

Mihai Criveti marked it as to-read
Mar 29, 2014

Jerome Lee marked it as to-read
Jan 15, 2014

Kate rated it really liked it
Dec 25, 2013

[redacted by S.H.I.E.L.D.] marked it as to-read
Dec 21, 2013

Libin marked it as to-read
Apr 06, 2013

Hugh Griffiths is currently reading it
Apr 01, 2013

Shorgov rated it liked it
Feb 01, 2013

Tom added it
Jan 05, 2013

Kyle marked it as to-read
Jan 01, 2013

Sebastien Charland marked it as to-read
Dec 12, 2012

Mohamed Mostafa marked it as to-read
Dec 05, 2012

« previous 1 2 next »

new topic
Discuss This Book

There are no discussion topics on this book yet. Be the first to start one »

Recommend It | Stats | Recent Status Updates

Goodreads is hiring!

If you like books and love to build cool products, we may be looking for you.
Learn more »

Books by Fred Long

Java Coding Guidelines: 75 Recommendations for Reliable and Secure Programs

Tales from One Blade of Grass: (A Memoir)

Software Engineering Environments: International Workshop on Environments, Chinon, France, September 18-20, 1989. Proceedings (Lecture Notes in Computer Science)

More…

Share This Book

+ Share on your website

Trivia About The CERT Oracle S...

No trivia or quizzes yet. Add some now »

title link	preview: The CERT Oracle Secure Coding Standard for Java
avg rating	preview: The CERT Oracle Secure Coding Standard for Java Goodreads rating: 3.71 (7 ratings)
small image	preview: click here [close]
med image	preview: click here [close]
BBCode	[url=https://www.goodreads.com/book/show/12993069-the-cert-oracle-secure-coding-standard-for-java?utm_medium=api&utm_source=blog_book][img]https://d.gr-assets.com/books/1348081864l/12993069.jpg[/img][/url] [url=https://www.goodreads.com/book/show/12993069-the-cert-oracle-secure-coding-standard-for-java?utm_medium=api&utm_source=blog_book]The CERT Oracle Secure Coding Standard for Java by Fred Long[/url]

See a Problem?

Preview — The CERT Oracle Secure Coding Standard for Java by Fred Long

The CERT Oracle Secure Coding Standard for Java

Friend Reviews

Reader Q&A

Lists with This Book

Community Reviews

new topic
Discuss This Book

Goodreads is hiring!

Books by Fred Long

Share This Book

Share on your website

Trivia About The CERT Oracle S...

See a Problem?

Preview — The CERT Oracle Secure Coding Standard for Java by Fred Long

The CERT Oracle Secure Coding Standard for Java

Friend Reviews

Reader Q&A

Lists with This Book

Community Reviews

new topicDiscuss This Book

Goodreads is hiring!

Books by Fred Long

Share This Book

Share on your website

Trivia About The CERT Oracle S...

new topic
Discuss This Book