Developers who write applications for the Oracle Solaris OS need to follow secure coding guidelines. Guidelines exist for secure codingin general, language-specific coding, and Oracle Solaris-specific coding andtools.
The following web sites track coding vulnerabilities and promote secure coding practices:
The CERT web site contains computer language references for secure codingpractices. These references might include sections about the POSIX APIs, whichare part of the API set of Oracle Solaris.
C – CERT C Secure Coding Standard
Additional guidelines for secure use of the standard C library functions in Oracle Solaris isavailable atSecurity Considerations When Using C Functions
Java –CERT Oracle Secure Coding Standard for Java andSecure Coding Guidelines for Java SE (https://www.oracle.com/java/technologies/javase/seccodeguide.html)
The Open Web Application Security Project (OWASP) hosts security guidelines for two web scripting languages:
Oracle Solaris provides specific APIs which can be used to write more secure code and to take advantage of the security and cryptographic features of the Oracle Solaris OS and Oracle Sun hardware systems. Additionally, the suite of documents for Oracle Developer Studio 12.6 include discussions of using the tools securely.
The following guides from Oracle Solaris address secure coding:
Resource Management and Oracle Solaris Zones Developer’s Guide