Software Engineering Institute (SEI) Podcast Series · Members of Technical Staff at the Software Engineering Institute

Updating Risk Assessment in the CERT Secure Coding StandardUpdating Risk Assessment in the CERT Secure Coding Standard

·26 min·2 clips

David reveals how adding a null check can fix alerts in minutes instead of hours of analysis.

David Svoboda and Joseph Seibel discuss proposed updates to the SEI CERT secure coding standard, focusing on revising risk assessment metrics to better prioritize automated detection and repair. They explain how these changes aim to reduce the overwhelming number of alerts in static analysis and improve efficiency for organizations like the DoD, while also planning transitions to GitHub and expanding standards to languages like Rust and Python.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Software Engineering Institute (SEI) Podcast Series