thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

SEI CERT Coding Standards

Language-specific secure coding rules from Carnegie Mellon's Software Engineering Institute for C, C++, Java, Perl and Android.

Definition

Each CERT rule has an identifier (for example STR31-C), a description, noncompliant and compliant code examples and a risk assessment. The standards are widely referenced by SAST tools and in safety- and security-critical development.

Example

Rule STR31-C requires that storage for strings has sufficient space for character data and the null terminator.

Exam tip

CERT standards are language-specific and are a common basis for SAST rule sets.

Related terms