![header thumbnail](/images/publishers\iso_cover.gif)
ISO/IEC TR 24772-1:2019
Current
The latest, up-to-date edition.
![header thumbnail](/images/publishers\iso_cover.gif)
Programming languages Guidance to avoiding vulnerabilities in programming languages Part 1: Language-independent guidance
Hardcopy , PDF , PDF 3 Users , PDF 5 Users , PDF 9 Users
English
10-12-2019
This document specifies software programming language vulnerabilities to be avoided in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. Language-specific descriptions of these vulnerabilities are provided in other parts of the ISO/IEC 24772 series.
It is applicable to the software developed, reviewed, or maintained for any application.
This document does not address software engineering and management issues such as how to design and implement programs, use configuration management tools, use managerial processes, and perform process improvement. Furthermore, the specification of properties and applications to be assured are not treated.
Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.