Back

ISO/IEC TR 24772:2013

Information technology -- Programming languages -- Guidance to avoiding vulnerabilities in programming languages through language selection and use

General information

Withdrawn from 10.12.2019
ICS Groups
35.060 Languages used in information technology
Directives or regulations
None

Standard history

Status
Date
Type
Name
20.05.2020
Main
ISO/IEC TR 24772-3:2020
02.04.2020
Main
ISO/IEC TR 24772-2:2020
10.12.2019
Main
ISO/IEC TR 24772-1:2019
04.03.2013
Main
ISO/IEC TR 24772:2013
Main
ISO/IEC TR 24772:2010
ISO/IEC TR 24772:2013 specifies software programming language vulnerabilities to be avoided in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. In general, this guidance is applicable to the software developed, reviewed, or maintained for any application.
Vulnerabilities are described in a generic manner that is applicable to a broad range of programming languages.

Required fields are indicated with *

*
*
*
PDF
79.98 € incl tax
Standard monitoring
English (PDF 830 KB)

Related products

Main

ISO/IEC TR 24772-3:2020

Programming languages -- Guidance to avoiding vulnerabilities in programming languages -- Part 3: C
Newest version Valid from 20.05.2020
Main

ISO/IEC TR 24772-2:2020

Programming languages -- Guidance to avoiding vulnerabilities in programming languages -- Part 2: Ada
Newest version Valid from 02.04.2020
Main

ISO/IEC TR 24772-1:2019

Programming languages -- Guidance to avoiding vulnerabilities in programming languages -- Part 1: Language-independent guidance
Newest version Valid from 10.12.2019
Main

ISO/IEC 9899:2018

Information technology -- Programming languages -- C
Newest version Valid from 05.07.2018

Standards designation

EVS Estonian standard
EN European standard (published by an CEN or CENELEC)
EN ISO International standard adopted as an European standard
ISO International Organization for Standardization’s standard
IEC International Electrotechnical Commission’s standard
HD CENELEC’s harmonisation document
   
EVS-EN European standard implemented in Estonia
EVS-EN ISO International standard adopted in Europe and implemented in Estonia
EVS-EN ISO/IEC International standard/International electrotechnical standard adopted in Europe and implemented in Estonia
EVS-IEC International electrotechnical standard implemented in Estonia
EVS-ISO International standard implemented in Estonia
   
A, AMD amedment
+A a full standard plus the amendment
/A only amendment
COR, AC corrigendum
+COR a full standard plus the corrigendum
NA national annex
+NA a full standard plus the national annex
/NA only national annex
TS technical specification
TR technical report
CWA agreement, developed by a CEN or CENELEC
prEVS-EN (etc) draft standard
   
et the standard is in Estonian only
en the standard is in English only
et-en the standard is in Parallel text Estonian-English