Software Engineering Institute

In the August/September edition of the newsletter, team members describe their work to update the CERT C++ Secure Coding Standard. 

Team members also published a new SEI technical report, Performance of Compiler-Assisted Memory Safety Checking, which describes the criteria for deploying a compiler-based memory safety checking tool and the performance that can be achieved with two such tools whose source code is freely available.

The team continues to perform Source Code Analysis Laboratory (SCALe) assessments, which has resulted in team members making many improvements to The CERT Oracle Secure Coding Standard for Java in efforts to evolve rules to be clearer and more precise, and to simplify conformance.