NBN ISO/IEC 24772-1:2025

Programming languages — Avoiding vulnerabilities in programming languages — Part 1: Language-independent catalogue of vulnerabilities (ISO/IEC 24772-1:2024)

ACTIVE

About this standard

Languages
English
Type
NBN
Standards committee
ISO/IEC JTC 1/SC 22 (Programming languages, their environments and system software interfaces)
Status
ACTIVE
Publication date
23 January 2025
ICS Code
35.060 (Languages used in information technology)
Withdrawn Date
Price
€ 166,00

Summary

< p class=" MsoBodyText" style=" mso-layout-grid-align: none text-autospace: none " > < span lang=" EN-GB" style=" mso-bidi-font-size: 12.0pt mso-fareast-font-family: ' MS Mincho' mso-fareast-theme-font: minor-fareast " > This document enumerates approaches and techniques to avoid software programming language vulnerabilities in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, the description of the vulnerabilities and description of avoidance mechanisms are applicable to the software developed, reviewed, or maintained for any application.< / span>


< p class=" MsoBodyText" style=" mso-layout-grid-align: none text-autospace: none " > < span lang=" EN-GB" style=" mso-bidi-font-size: 12.0pt mso-fareast-font-family: ' MS Mincho' mso-fareast-theme-font: minor-fareast " > Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.< / span>