Secure Coding Resources

Question

Where can I find information on secure coding?

Answer

There are many secure coding resources available.

Here is a selection of secure coding resources:

• Common software vulnerabilities
  • OWASP Top Ten
  • CWE/SANS Top 25 Vulnerabilities
• General secure coding resources
  • Open Web Application Security Project (OWASP)
  • SANS Institute
  • Build Security In
  • Common Weakness Enumeration (CWE)
  • Micro Focus Fortify Security taxonomy of software errors
• Java Resources
  • Oracle Java Security Resource Center
  • Oracle Java SE Security
  • Oracle Secure Coding Guidelines for Java SE
  • SEI CERT Oracle Coding Standard for Java
  • OWASP Java Project
  • JavaOne Security Talks
  • Java Language and Virtual Machine Specifications
• .NET Resources
  • Microsoft .NET Secure Coding Guidelines
  • Microsoft Security in the .NET Framework
  • Microsoft Security Rules rule set for managed code
  • OWASP .NET Security Cheat Sheet
  • MVC Recommended Resources
• C/C++ Resources
  • SEI CERT C Coding Standard
  • SEI CERT C++ Coding Standard
• Objective-C/IOS Resources
  • iOS Security Guide
  • Apple Secure Coding Guide
  • OWASP Mobile Security Testing Guide
  • Infosec Institute - IOS Application Security
• Android Resources
  • SEI CERT Android Secure Coding Standard
  • Android Security Tips
  • Android Hacking and Security
  • Android Security Issues
• PHP Resources
  • PHP Security Manual
  • Survive The Deep End: PHP Security
  • PHP Security Guide
  • OWASP PHP Security Cheat Sheet
• Perl Resources
  • Perl Security manual page
  • SEI CERT Perl Secure Coding Standard
  • Perl Secure Programming Tutorial
  • Cigital, “Security Issues in Perl Scripts”

References

Referenced websites