From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Thread: 103376,bb14f1c1986544fb,start X-Google-NewGroupId: yes X-Google-Attributes: gida07f3367d7,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: g2news1.google.com!news2.google.com!news.glorb.com!feeder.erje.net!feeder.news-service.com!94.75.214.39.MISMATCH!aioe.org!.POSTED!not-for-mail From: "Nasser M. Abbasi" Newsgroups: comp.lang.ada Subject: Does Ada need a 'secure coding standard' as well? Date: Sat, 28 May 2011 11:53:25 -0700 Organization: Aioe.org NNTP Server Message-ID: Reply-To: nma@12000.org NNTP-Posting-Host: TUXTYYqX1yG7hs3zxUg7ng.user.speranza.aioe.org Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Complaints-To: abuse@aioe.org User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10 X-Notice: Filtered by postfilter v. 0.8.2 Xref: g2news1.google.com comp.lang.ada:19540 Date: 2011-05-28T11:53:25-07:00 List-Id: I saw that CMU makes now what is called CERT (secure coding standards) for different languages. They have Java, C, C++ in there. These are supposed to be rules that a programmer should adopt to make the code written by that language more 'safe' and 'secure' Here is the one for C for example https://www.securecoding.cert.org/confluence/display/seccode/CERT+C+Secure+Coding+Standard I was wondering if Ada would benefit of having something like this? such secure programming rules customized for Ada. Or if it is even needed as much for Ada? Some of the rules seem good to know about May be some of this material is allready in the Ada rational in different places. not sure now. --Nasser