« More News Stories June 8, 2012—Having successfully coordinated
projects that resulted in secure coding standards for the C,
C++, and Java programming languages, the CERT Secure Coding
Initiative has unveiled work on a draft standard for Perl. The
members of the CERT Secure Coding Team have analyzed thousands
of vulnerability reports, including reports produced by the CERT
Vulnerability Analysis Team, to identify insecure coding
practices in Perl. From this analysis, the team has developed
the draft Perl secure coding standard. The goal for the standard
is to provide software developers with a tool for reducing or
eliminating vulnerabilities before deployment. This work is
being sponsored by the Department of Homeland Security, Network
Security Deployment Division. “In our analysis, we performed
Perl code audits using the Source Code Analysis Lab (SCALe),”
said the Secure Coding Team’s David Svoboda. “Our audit process
presupposes a secure coding standard. So, auditing Perl code
required us to have a draft s