MITRE, CWE, and CERT Secure Coding Standards
• SEI Report
Publisher
Software Engineering Institute
Topic or Tag
Abstract
Common Weakness Enumeration
The Common Weakness Enumeration (CWE) is a unified, measurable set of software weaknesses that enables the effective discussion, description, selection, and use of software security tools and services that can find these weaknesses in source code and operational systems. The CWE also enables better understanding and management of software weaknesses related to architecture and design. It enumerates design and architectural weaknesses, as well as low-level coding and design errors.
CERT Secure Coding Standards
CERT is developing secure coding standards for commonly used programming languages such as C, C++, and Java through a broad-based community effort that includes members of the software development and software security communities. Well-documented and enforceable coding standards are essential to secure software development. Coding standards encourage programmers to follow a uniform set of rules and guidelines determined by the requirements of the project and organization, rather than by the programmer’s familiarity or preference. Once established, these standards can be used as a metric to evaluate source code (using manual or automated processes) to determine compliance with the standard.
CERT secure coding standards include guidelines for avoiding coding and implementation errors, as well as low-level design errors.
Cite This SEI Report
Seacord, R., & Martin, R. (2010, February 8). MITRE, CWE, and CERT Secure Coding Standards. Retrieved August 16, 2026, from https://www.sei.cmu.edu/library/mitre-cwe-and-cert-secure-coding-standards/.
@techreport{seacord_2010,
author={Seacord, Robert and Martin, Robert},
title={MITRE, CWE, and CERT Secure Coding Standards},
month={Feb},
year={2010},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/mitre-cwe-and-cert-secure-coding-standards/},
note={Accessed: 2026-Aug-16}
}
Seacord, Robert, and Robert Martin. "MITRE, CWE, and CERT Secure Coding Standards." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, February 8, 2010. https://www.sei.cmu.edu/library/mitre-cwe-and-cert-secure-coding-standards/.
R. Seacord, and R. Martin, "MITRE, CWE, and CERT Secure Coding Standards," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 8-Feb-2010 [Online]. Available: https://www.sei.cmu.edu/library/mitre-cwe-and-cert-secure-coding-standards/. [Accessed: 16-Aug-2026].
Seacord, Robert, and Robert Martin. "MITRE, CWE, and CERT Secure Coding Standards." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 8 Feb. 2010. https://www.sei.cmu.edu/library/mitre-cwe-and-cert-secure-coding-standards/. Accessed 16 Aug. 2026.
Seacord, Robert; & Martin, Robert. MITRE, CWE, and CERT Secure Coding Standards. Software Engineering Institute. 2010. https://www.sei.cmu.edu/library/mitre-cwe-and-cert-secure-coding-standards/