Agenda: Meeting #44 on Programming Language Vulnerabilities, April 15-16 2016

Document ISO/IEC/JTC 1/SC 22/WG 23 N0607

Draft Agenda Meeting #44
ISO/IEC JTC 1/SC 22/WG 23: Programming Language Vulnerabilities
15-16 April 2016

Meeting Location :

British Standards Institute

BSI Group,

Chiswick Tower,

389 Chiswick High Road,

London, W4 4AL, UK

Hotel and local arrangement information is included in the files associated with this agenda.

Meeting Times:

15-16 April 2016: 0900-1700 UK daylight time (0800-1600 UTC)

Local Arrangements:

See the accompanying documents for local arrangements and for a visa request.

Local Contacts:

N/A

IMPORTANT:

Agenda

1 Opening activities

1.1 Opening Comments

1.2 Introduction of Participants/Roll Call

1.3 Procedures for this Meeting

1.4 Approval of previous Minutes (meeting 43, document N642)

1.5 Review of actions items and resolutions, Action Item and Decision Logs

1.6 Approval of Agenda [N 0647]

1.7 Future Meeting Schedule


2017
pre-mtg-51	TBD November 2017	Teleconference (UTC 2000, 2 hr)
post-mtg-50	TBD October 2017	Teleconference (UTC 2000, 2 hr)
#50	TBD August 2017	In-person (with SC 22 Plenary)
#49	TBD June 2017	In-Person (2 day)
post-mtg-48	TBD May 2017	Teleconference (UTC 2000, 2 hr)
#48	TBD April 2017	In-person (2 day)
pre-mtg-48	TBD March 2017	Teleconference (UTC 2100, 2 hr)
post-mtg-47	TBD February 2017	Teleconference (UTC 2100, 2 hr)
#47	23-24 January 2017	In-person (2 day)

2016
pre-mtg-47	21/11/16	Teleconference (UTC 2000, 2 hr)	oo
post-mtg-46	11/10/16	Teleconference (UTC 2000, 2 hr)
#46	15-16 Sep 2016	Vienna, Austria (with SC 22 Plenary)
pre-mtg-46	TBD August 2016	Teleconference (UTC 2000, 2 hr)
#45	14-15 June 2016	Pisa, Italy with Ada Europe
Pre-mtg 45	16/05/16	Teleconference (UTC 2000, 2 hr)

2. Liaison Activities

2.1 SC 22

2.2 PL 22 (Open)

2.3 PL22.3/WG5 (Fortran)

2.4 WG4 (COBOL)

2.5 WG9 (Ada)

2.6 PL22.11/WG14 (C)

2.7 PL22.16/WG21 (C++)

2.8 Ecma International, TC49/TG2 (C#)

2.9 Ecma International, TC39 (ECMAScript)

2.10 MISRA (C)

2.11 MISRA (C++)

2.12 SPARK

2.13 SC7/WG19 (UML)

2.14 SC27/WG3, WG4 Security

2.15 Other Liaison Activities or National body reports

3. Document Review

3.1 TR 24772-1 Vulnerabilities, language independent

Document N645, N646

3.2 TR 24772-2 Ada language specific part

Waiting for a proposal from SC 22/WG 9

3.3 TR 24772-3 C language specific part

Document 643

3.4 TR 24772-4 Python language specific part

Discuss at meeting 41.

3.5 TR 24772-8 Fortran

Document [N0560] needs review.

3.6 TR 24772-X C++

Consider document [N0582]

3.7 Bibliography for each TR24772 Part

3.8 Dirty Dozen Rules for C, generic, and other languages

Strategy on how to use and incorporate such rules.