Collection of Prominent C/C++ Security and Coding Standards
This article compiles a curated list of major C and C++ security and coding guidelines—including 360 Safe Rules, Tencent Security Guide, Huawei Secure Coding Specification, Google C++ Style Guide, C++ Core Guidelines, SEI CERT, MISRA, and High Integrity C++—providing brief descriptions and direct repository links for each.
1. 360 Safe Rules Collection Provides a comprehensive set of rules for desktop, server, and embedded software, adhering to C11, C++11, and later standards. https://github.com/Qihoo360/safe-rules
2. Tencent Code Security Guide Offers practical security guidance for libraries and APIs across multiple languages such as C, C++, Java, JavaScript, Go, and Python. https://github.com/Tencent/secguide
3. Huawei C&C++ Secure Coding Specification Highlights eight critical security issues (resource, safety, sensitive information, etc.) and is concise enough for use during code reviews. No direct link is provided; the document can be searched online.
4. Google C++ Style Guide (GSG) A widely adopted corporate‑level style guide with detailed formatting rules, compatible with C++17. https://google.github.io/styleguide/cppguide.html (Chinese version: https://github.com/zh-google-styleguide/zh-google-styleguide )
5. C++ Core Guidelines (CCG) Authored by the C++ creator, this extensive guideline presents modern C++ best practices and anti‑patterns. http://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines (Chinese version: https://github.com/lynnboy/CppCoreGuidelines-zh-CN )
6. SEI CERT Coding Standards Published by Carnegie Mellon University’s Software Engineering Institute, focusing on security measures for C/C++ code. https://wiki.sei.cmu.edu/confluence/display/seccode
7. MISRA C/C++ Industry‑grade standard from the Motor Industry Software Reliability Association, widely used in embedded systems; requires purchase for full documentation. https://www.misra.org.uk
8. High Integrity C++ Coding Standard Provided by Perforce, this standard emphasizes code quality and risk mitigation, complementing security‑focused guidelines. https://www.perforce.com/resources/qac/high-integrity-cpp-coding-standard
360 Quality & Efficiency
360 Quality & Efficiency focuses on seamlessly integrating quality and efficiency in R&D, sharing 360’s internal best practices with industry peers to foster collaboration among Chinese enterprises and drive greater efficiency value.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.