Description

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Consequences

Other — Other

Mitigations

Phase: Policy

Select and require coding standards. Ensure that they include security concerns.

Phase: Implementation

Closely follow coding standards, possibly enforcing them upon checkin of the code into a source control system or with periodic analyses.

Detection

Automated Static Analysis

Automated tools can detect violations of many code standards.