ISO/IEC 24772-1:2024

Programming languages – Avoiding vulnerabilities in programming languages – Part 1: Language-independent catalogue of vulnerabilities

This document enumerates approaches and techniques to avoid software programming language vulnerabilities in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, the description of the vulnerabilities and description of avoidance mechanisms are applicable to the software developed, reviewed, or maintained for any application.

Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.

Edition	2024
Standard Part No	1
Published Date	2024
Published By	ISO/IEC
Page Count	153