Skip to content

h-ssiqueira/Architecture_Coding_Standards

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

22 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Architecture and Coding Standards

GitHub Pages

Click and try the graph visualization

Useful references for ISOs (International Organization for Standardization) and RFCs (Request for Comments) related to architecture and coding standards.


Cryptography && Hashing && Security

Subject RFC
MD2 RFC 1319 - The MD2 Message-Digest Algorithm
MD4 RFC 1320 - The MD4 Message-Digest Algorithm
MD5 RFC 1321 - The MD5 Message-Digest Algorithm
RFC 6151 - Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
HMAC RFC 2104 - HMAC: Keyed-Hashing for Message Authentication
SHA1 RFC 3174 - US Secure Hash Algorithm 1 (SHA1)
AES RFC 3394 - Advanced Encryption Standard (AES) Key Wrap Algorithm
SHA2 RFC 6234 - US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
Argon2 RFC 9106 - Argon2 Memory-Hard Function for Password Hashing and Proof-of-Work Applications
Hashing and encoding algorithms RFC 9380 - Hashing to Elliptic Curves
JWT RFC 7519 - JSON Web Token (JWT)
RFC 8725 - JSON Web Token Best Current Practices
OAuth2 RFC 6749 - The OAuth 2.0 Authorization Framework
RFC 6750 - The OAuth 2.0 Authorization Framework: Bearer Token Usage
RFC 7009 - OAuth 2.0 Token Revocation
RFC 7523 - JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants
RFC 7591 - OAuth 2.0 Dynamic Client Registration Protocol
RFC 7592 - OAuth 2.0 Dynamic Client Registration Management Protocol
RFC 7662 - OAuth 2.0 Token Introspection
RFC 8414 - OAuth 2.0 Authorization Server Metadata
RFC 8628 - OAuth 2.0 Device Authorization Grant
RFC 8693 - OAuth 2.0 Token Exchange
RFC 8705 - OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens
RFC 8707 - Resource Indicators for OAuth 2.0
RFC 9068 - JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens
RFC 9101 - The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)
RFC 9126 - OAuth 2.0 Pushed Authorization Requests
RFC 9207 - OAuth 2.0 Authorization Server Issuer Identification
RFC 9396 - OAuth 2.0 Rich Authorization Requests
RFC 9470 - OAuth 2.0 Step Up Authentication Challenge Protocol
RFC 9700 - Best Current Practice for OAuth 2.0 Security
RFC 9728 - OAuth 2.0 Protected Resource Metadata
HSTS RFC 6797 - HTTP Strict Transport Security (HSTS)
Files RFC 9116 - A File Format to Aid in Security Vulnerability Disclosure
ASVS Application Security Verification Standard
OWASP Cheat Sheet Series

Back to top


Datatypes && Representations

Subject RFC
Datetime representation ISO 8601 - Data elements and interchange formats - Information interchange Representation of dates and times
RFC 3339 - Date and Time on the Internet: Timestamps
RFC 9557 - Date and Time on the Internet: Timestamps with Additional Information
Representation of currencies ISO 4217 - Codes for the representation of currencies

Back to top


Formatting

Subject RFC
JSON RFC 8259 - The JavaScript Object Notation (JSON) Data Interchange Format
YAML RFC 9512 - YAML Media Type

Back to top


Networking

Subject RFC
UDP RFC 768 - User Datagram Protocol
IPV4 RFC 791 - Internet Protocol
Email RFC 5322 - Internet Message Format
Email Authentication RFC 8616 - Email Authentication for Internationalized Mail
WebSocket RFC 6455 - The WebSocket Protocol
IPV6 RFC 8200 - Internet Protocol, Version 6 (IPv6) Specification
TCP RFC 9293 - Transmission Control Protocol
SMTP RFC 5321 - Simple Mail Transfer Protocol
LDAP RFC 2253 - Lightweight Directory Access Protocol (v3): UTF-8 String Representation of Distinguished Names
RFC 4515 - Lightweight Directory Access Protocol (LDAP): String Representation of Search Filters

Back to top


REST APIs && Backend

Subject RFC
URI Syntax RFC 2396 - Uniform Resource Identifiers (URI): Generic Syntax
RFC 3986 - Uniform Resource Identifier (URI): Generic Syntax
URI Design RFC 8820 - URI Design and Ownership
PATCH RFC 5789 - PATCH Method for HTTP
HTTP/1.0 RFC 1945 - Hypertext Transfer Protocol -- HTTP/1.0
HTTP/1.1 RFC 2616 - Hypertext Transfer Protocol -- HTTP/1.1
RFC 7230 - Hypertext Transfer Protocol (HTTP/1.1): Message Syntax and Routing
RFC 7231 - Hypertext Transfer Protocol (HTTP/1.1): Semantics and Content
RFC 7232 - Hypertext Transfer Protocol (HTTP/1.1): Conditional Requests
RFC 7233 - Hypertext Transfer Protocol (HTTP/1.1): Range Requests
RFC 7234 - Hypertext Transfer Protocol (HTTP/1.1): Caching
RFC 7235 - Hypertext Transfer Protocol (HTTP/1.1): Authentication
RFC 9112 - HTTP/1.1
HTTP/2 RFC 7540 - Hypertext Transfer Protocol Version 2 (HTTP/2)
RFC 9113 - HTTP/2
HTTP/3 RFC 9114 - HTTP/3
HTTPS RFC 2660 - The Secure HyperText Transfer Protocol
HTTP Standards RFC 9110 - HTTP Semantics ALT
RFC 9111 - HTTP Caching
HTTP Protocols and Security RFC 9205 - Building Protocols with HTTP
HTTP State Management RFC 2109 - HTTP State Management Mechanism
RFC 2965 - HTTP State Management Mechanism
RFC 6265 - HTTP State Management Mechanism
HTTP APIs Problem Details RFC 7807 - Problem Details for HTTP APIs
RFC 9457 - Problem Details for HTTP APIs
TLS RFC 2246 - The TLS Protocol Version 1.0
RFC 4346 - The Transport Layer Security (TLS) Protocol Version 1.1
RFC 5246 - The Transport Layer Security (TLS) Protocol Version 1.2
RFC 6353 - Transport Layer Security (TLS) Transport Model for the Simple Network Management Protocol (SNMP)
RFC 9325 - Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
RFC 7507 - TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks
RFC 7919 - Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer Security (TLS)

Back to top


Software && Product

ISO Detail
27000 Overview and vocabulary
27001 Requirements
27002 Code of practice for information security controls
27003 Information security managgement systems - guidance
27004 Information security management - monitoring, measurement, analysis and evaluation
27005 Information security risk management
27006 Requirements for bodies providing audit and certification of information security management systems
27007 Guidelines for information security management systems auditing
27008 Guidelines for auditors on information security controls
27009 Sector-specific application of ISO/IEC 27001
27010 Information security management for inter-sector and inter-orgaanizational communications
27011 Code of practice for information security controls based on ISO/IEC 27002 for telecommunications organizations
27013 Guidance on the integraated implementation of ISO/IEC 27001 and ISO/IEC 20000
27014 Governance of information security
27016 Information security management - organizational economics
27017 Code of practice for information security controls based on ISO/IEC 27002 for cloud systems
27018 Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
27019 Information security management guidelines based on ISO/IEC 27002 for process control systems specific to the energy utility industry
27023 Mapping the revised editions of ISO/IEC 27001 and ISO/IEC 27002
27031 Guidelines for information and communication technology readiness for business continuity
27032 Guidelines for cybersecurity
27033 Network security
27034 Application security
27035 Information security incident management
27036 Information security for supplier relationships
27037 Guidelines for identification, collection, acquisition and preservations of digital evidence
27038 Specification for diggital redaction
27039 Selection, deployment and operations of intrusion detection and prevention systems
27040 Storage security
27041 Guidance on assuringg suitability and adequaacy of incident investigative method
27042 Guidelines for the analysis and interpretation of digital evidence
27043 Incident investigation principles and processes
27050 Electronic discovery
27102 Guidelines for cyber-insurance
27103 Cybersecurity
27185 Symbols to be used with cardiac rhythm management device labels, and information to be supplied
27186 Four-pole connector system for implantable cardiac rhythm management devices
27327 Air curtain units
27427 Nebulizing systems and components
27500 Rationale and general principles
27527 Health informatics - provider identification
27550 Privacy engineering for system cycle process
27551 Requirements for attribute-based unlinkable entity authentication
27687 Nanotechnologies - terminology and definitions
27701 Security techniques - extension of ISO/IEC 27001 and ISO/IEC 27002
27729 International Standard Name Identifier (ISNI)
27730 International Standard Collection Identifier (ISCI)
27789 Audit trails for electronic health records
27790 Document registry framework
27799 Information security management in health using ISO/IEC 27002
27809 Measures for ensuring patient safety of health software
27931 An application protocol for electronic dataa exchange in healthcare environments
27932 HL7 Clinical Document Architecture
27951 Common terminology services

Back to top


References

Back to top

About

Reference for ISOs and RFCs related to architecture and coding standards

Topics

Resources

License

Stars

Watchers

Forks