Using Artificial Intelligence (AI) on standards and related intellectual property is strongly prohibited. In the event of a violation, your access to the standards will be revoked.
Main page>IEC Standards>ISO/IEC 24772-1:2024 - Programming languages - Avoiding vulnerabilities in programming languages - Part 1: Language-independent catalogue of vulnerabilities
immediate downloadReleased: 2024-10-29
ISO/IEC 24772-1:2024
Programming languages - Avoiding vulnerabilities in programming languages - Part 1: Language-independent catalogue of vulnerabilities
Langages de programmation - Conduite pour éviter les vulnérabilités dans les langages de programmation - Partie 1: Catalogue de vulnérabilités indépendant du langage
This document enumerates approaches and techniques to avoid software programming language vulnerabilities in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, the description of the vulnerabilities and description of avoidance mechanisms are applicable to the software developed, reviewed, or maintained for any application.
Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.