Secure coding industry best practices

Secure coding is the foundation of secure software. We have done threat modeling and secure architecture design. These require secure coding to make them happen. Secure coding can be a challenge for the development team since developers are occupied with working on new features, and there may be hundreds of secure coding rules to learn. Before we discuss secure coding practices in more detail, we will review existing secure coding standards we can refer to.

Depending on programming languages, secure coding standards are summarized in the following table:

Reference standards

Description and reference

CERT Secure Coding

  • This provides secure coding standards for C, C++, Java, Perl, and Android. ...

Get Hands-On Security in DevOps now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.