CSC 1029 Coding Standards Quiz

CSC 1029 Coding Standards

• Course covering coding standards for secure coding implementation
• Objectives include identifying and describing secure coding, outlining coding standards and rules, and applying secure coding principles based on industry standards
• Week 7 agenda includes: review, clean code, SEI CERT coding standards, quality and compliance coding standards, C++ core guidelines, coding conventions, MISRA, Google C++ style guide, Microsoft secure coding, todo list and resources for help

Good Programming Practices

• Programs are meant to be read by humans and only incidentally by computers to execute.
• Key attributes of good programmers include persistence, attention to design, problem-solving and precise solutions/
• Qualities like patience, precision and design thinking are emphasized

Review

• Complete the 1.8 Matching exercise

Clean Code Strategies

• Strategies for writing clean code with links to relevant YouTube videos to aid in learning coding

SEI CERT Coding Standards

• The Software Engineering Institute's (SEI) CERT Coding Standards provide coding practices for commonly used programming languages like C, C++, Java, and Perl, including the Android platform.
• These standards are developed through community and software security efforts
• Guidelines for secure coding in C/C++, Java, Perl and Android are covered

Coding Standards for Quality and Compliance

• This section links to an article providing coding rules guidelines, importance of coding standards, key C++ coding standards, and static code analysis to enforce these standards

C++ Core Guidelines

• Coding standards are needed for specific purposes and environments in C++
• Specific questions regarding naming conventions like namespace std, local variable declarations, and global variable usage are discussed
• Guidelines for commenting and naming conventions are covered

C++ Core Guidelines: Comments & Naming

• Guidelines for comments and naming variables include specific examples and rules around avoiding obvious comments that repeat code statements and naming conventions for consistency and clarity

MISRA

• MISRA provides best practice guidelines for safe and secure embedded control systems and standalone software, with particular relevance in critical applications.
• MISRA C++ was initially published in 2008

Google C++ Style Guide

• The style guide is available as a file that needs to be read through for guidelines

Microsoft Code Security

• Security vulnerabilities often result from incorrect assumptions about user input or a lack of understanding of the development platform.

Earn Your Pre-work Grade

• Post weekly discussion questions and research solutions in D2L.
• Complete Week 07 Content Module in D2L to 100%

Questions, Clarifications, and Help

• Students can get help via appointment, drop-in times, email, and online tutoring resources.