Podcast
Questions and Answers
What is one of the main objectives of coding standards for secure coding?
What is one of the main objectives of coding standards for secure coding?
Which of the following is NOT listed as a strategy for writing Clean Code?
Which of the following is NOT listed as a strategy for writing Clean Code?
What is the primary goal of the SEI CERT Coding Standards?
What is the primary goal of the SEI CERT Coding Standards?
Which programming languages are included in the SEI CERT Coding Standards?
Which programming languages are included in the SEI CERT Coding Standards?
Signup and view all the answers
According to the content, what is emphasized about programming languages and coding?
According to the content, what is emphasized about programming languages and coding?
Signup and view all the answers
Which of the following coding standards is focused on ensuring secure coding practices?
Which of the following coding standards is focused on ensuring secure coding practices?
Signup and view all the answers
What do the C++ Core Guidelines emphasize?
What do the C++ Core Guidelines emphasize?
Signup and view all the answers
Which of the following practices is recommended for coding standards compliance?
Which of the following practices is recommended for coding standards compliance?
Signup and view all the answers
Which resource provides guidance on writing Clean Code across different programming languages?
Which resource provides guidance on writing Clean Code across different programming languages?
Signup and view all the answers
What is considered an essential trait of a good programmer?
What is considered an essential trait of a good programmer?
Signup and view all the answers
What is the primary purpose of coding standards in C++?
What is the primary purpose of coding standards in C++?
Signup and view all the answers
Which guideline specifically addresses how comments should be written?
Which guideline specifically addresses how comments should be written?
Signup and view all the answers
What is a key recommendation regarding naming conventions in C++ according to the core guidelines?
What is a key recommendation regarding naming conventions in C++ according to the core guidelines?
Signup and view all the answers
What is one of the major risks associated with coding errors according to Microsoft Code Security?
What is one of the major risks associated with coding errors according to Microsoft Code Security?
Signup and view all the answers
When should local variables be declared according to C++ guidelines?
When should local variables be declared according to C++ guidelines?
Signup and view all the answers
Which of the following is NOT a recommendation in the C++ Core Guidelines?
Which of the following is NOT a recommendation in the C++ Core Guidelines?
Signup and view all the answers
What is the main focus of the MISRA guidelines?
What is the main focus of the MISRA guidelines?
Signup and view all the answers
Why should developers avoid placing two statements on the same line?
Why should developers avoid placing two statements on the same line?
Signup and view all the answers
What is an acceptable practice according to the C++ guidelines for naming identifiers?
What is an acceptable practice according to the C++ guidelines for naming identifiers?
Signup and view all the answers
What aspect of coding standards is emphasized to prevent security vulnerabilities?
What aspect of coding standards is emphasized to prevent security vulnerabilities?
Signup and view all the answers
Study Notes
CSC 1029 Coding Standards
- Course covering coding standards for secure coding implementation
- Objectives include identifying and describing secure coding, outlining coding standards and rules, and applying secure coding principles based on industry standards
- Week 7 agenda includes: review, clean code, SEI CERT coding standards, quality and compliance coding standards, C++ core guidelines, coding conventions, MISRA, Google C++ style guide, Microsoft secure coding, todo list and resources for help
Good Programming Practices
- Programs are meant to be read by humans and only incidentally by computers to execute.
- Key attributes of good programmers include persistence, attention to design, problem-solving and precise solutions/
- Qualities like patience, precision and design thinking are emphasized
Review
- Complete the 1.8 Matching exercise
Clean Code Strategies
- Strategies for writing clean code with links to relevant YouTube videos to aid in learning coding
SEI CERT Coding Standards
- The Software Engineering Institute's (SEI) CERT Coding Standards provide coding practices for commonly used programming languages like C, C++, Java, and Perl, including the Android platform.
- These standards are developed through community and software security efforts
- Guidelines for secure coding in C/C++, Java, Perl and Android are covered
Coding Standards for Quality and Compliance
- This section links to an article providing coding rules guidelines, importance of coding standards, key C++ coding standards, and static code analysis to enforce these standards
C++ Core Guidelines
- Coding standards are needed for specific purposes and environments in C++
- Specific questions regarding naming conventions like namespace std, local variable declarations, and global variable usage are discussed
- Guidelines for commenting and naming conventions are covered
C++ Core Guidelines: Comments & Naming
- Guidelines for comments and naming variables include specific examples and rules around avoiding obvious comments that repeat code statements and naming conventions for consistency and clarity
MISRA
- MISRA provides best practice guidelines for safe and secure embedded control systems and standalone software, with particular relevance in critical applications.
- MISRA C++ was initially published in 2008
Google C++ Style Guide
- The style guide is available as a file that needs to be read through for guidelines
Microsoft Code Security
- Security vulnerabilities often result from incorrect assumptions about user input or a lack of understanding of the development platform.
Earn Your Pre-work Grade
- Post weekly discussion questions and research solutions in D2L.
- Complete Week 07 Content Module in D2L to 100%
Questions, Clarifications, and Help
- Students can get help via appointment, drop-in times, email, and online tutoring resources.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Related Documents
Description
This quiz covers secure coding implementation, industry standards, and best practices for clean code as discussed in CSC 1029. You will explore coding conventions, quality standards, and principles that promote secure and readable code. Prepare to identify, describe, and apply the key concepts from the course material.
