Agenda: Meeting #44 on Programming Language Vulnerabilities, April 15-16 2016

Document ISO/IEC/JTC 1/SC 22/WG 23 N0667

Draft Agenda Meeting #46
ISO/IEC JTC 1/SC 22/WG 23: Programming Language Vulnerabilities
15-16 September 2016

Meeting Location :

Austrian Standards Institute - ASI

Heinestraße 38 A-1020

Vienna Austria

Meeting Times:

15-16 June 2016: 0900-1700 Central European daylight time (0700-1500 UTC)

Local Arrangements:

Hotel and local arrangement information can be found in the local arrangements document.

Local Contacts:

Austrian Standards Institute

IMPORTANT:

Agenda

1 Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

1.4 Approval of previous Minutes (meeting 45, document N663)

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda [N 0667]

1.7 Future Meeting Schedule


2017
pre-mtg-51	20/11/17	Teleconference (UTC 2000, 2 hr)
post-mtg-50	16/10/17	Teleconference (UTC 2000, 2 hr)
#50	17-18 August 2017	BSI London (with SC 22 Plenary)
#49	12-13 June 2017	Vienna, Austria with Ada Europe(2 day)
post-mtg-48	15/05/17	Teleconference (UTC 2000, 2 hr)
#48	6-7 April 2017	IBM Markham, Canada (2 day)
pre-mtg-48	06/03/17	Teleconference (UTC 2100, 2 hr)
#47	23-24 January 2017	In-person (2 day)

2016
pre-mtg-47	21/11/16	Teleconference (UTC 2000, 2 hr)	oo
post-mtg-46	11/10/16	Teleconference (UTC 2000, 2 hr)

2. Liaison Activities

2.1 SC 22

2.2 PL 22 (Open)

2.3 PL22.3/WG5 (Fortran)

2.4 WG4 (COBOL)

2.5 WG9 (Ada)

2.6 PL22.11/WG14 (C)

2.7 PL22.16/WG21 (C++)

2.8 Ecma International, TC49/TG2 (C#)

2.9 Ecma International, TC39 (ECMAScript)

2.10 MISRA (C)

2.11 MISRA (C++)

2.12 SPARK

2.13 SC7/WG19 (UML)

2.14 SC27/WG3, WG4 Security

2.15 Other Liaison Activities or National body reports

3. Document Review

3.1 TR 24772-1 Vulnerabilities, language independent

Document N664,

3.2 TR 24772-2 Ada language specific part

Waiting for a proposal from SC 22/WG 9

3.3 TR 24772-3 C language specific part

Document N0665

3.4 TR 24772-4 Python language specific part

Document N0592.

3.5 TR 24772-8 Fortran

Document [N0560] needs review.

3.6 TR 24772-X C++

Consider document [N0582]

3.7 Bibliography for each TR24772 Part

3.8 Dirty Dozen Rules for C, generic, and other languages

Strategy on how to use and incorporate such rules.