Java™ Coding Guidelines: 75 Recommendations for Reliable and Secure Programs

Foreword

James A. Gosling

This set of Java^™ Coding Guidelines, a follow-on to the earlier The CERT^® Oracle^® Secure Coding Standard for Java^™, is invaluable. This book could almost be retitled Reliable Java^™ Coding Guidelines. One of the things that has struck me over the years is the interplay between reliability and security. There are all sorts of explicit security tools—cryptography, authentication, and others—but most break-ins are exploitations of bugs: coding that was badly done or that was insufficiently defensive. Building a reliable system is, in many ways, equivalent to building a secure system. The work you do in reliability pays off in security, and vice versa.

This book highlights the fact that security is not a feature; it is an ...