本文件规定了在安全、安全、任务关键型和业务关键型软件需要确保行为的系统开发中应避免的软件编程语言漏洞。ISO/IEC 24772系列的其他部分提供了这些漏洞的特定语言描述。 它适用于为任何应用程序开发、审查或维护的软件。交叉引用:ISO/IEC 2382ISO 80000-2IEC 61508ISO/IEC TR 24731-1ISO/IEC 8652ISO/IEC 14882ISO/IEC TR 15942ISO/IEC 9899ISO/IEC 1539-1ISO/IEC 15408ISO/IEC TR 24718ISO/IEC 10967-1:2012ISO/IEC 10967-2:2001ISO/IEC 10967-3:2006ISO/IEC/IEEE 60559:2011ISO/IEC 30170:2012购买本文件时提供的所有当前修订。

This document specifies software programming language vulnerabilities to be avoided in the development of systems where assured behaviour is required for security, safety, mission-critical and business-critical software. Language-specific descriptions of these vulnerabilities are provided in other parts of the ISO/IEC 24772 series. It is applicable to the software developed, reviewed, or maintained for any application.Cross References:ISO/IEC 2382ISO 80000-2IEC 61508ISO/IEC TR 24731-1ISO/IEC 8652ISO/IEC 14882ISO/IEC TR 15942ISO/IEC 9899ISO/IEC 1539-1ISO/IEC 15408ISO/IEC TR 24718ISO/IEC 10967-1:2012ISO/IEC 10967-2:2001ISO/IEC 10967-3:2006ISO/IEC/IEEE 60559:2011ISO/IEC 30170:2012All current amendments available at time of purchase are included with the purchase of this document.