Unsafe Impedance Safe Languages and Safe by Design Software

被引:0
|
作者
Barney, Lee [1 ]
Neto, Adolfo [2 ]
机构
[1] Brigham Young Univ Idaho, Rexburg, ID 83460 USA
[2] Univ Tecnol Fed Parana, Curitiba, Parana, Brazil
关键词
Memory Safe Languages; Functional Programming; Secure By Design; Secure By Default;
D O I
10.1145/3677995.3678196
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
In December 2023, security agencies from five countries in North America, Europe, and the south Pacific produced a document encouraging senior executives in all software producing organizations to take responsibility for and oversight of the security of the software their organizations produce. In February 2024, the White House released a cybersecurity outline, highlighting the December document. In this work we review the safe languages listed in these documents, and compare the safety of those languages with Erlang and Elixir, two BEAM languages. These security agencies' declaration of some languages as safe is necessary but insufficient to make wise decisions regarding what language to use when creating code. We propose an additional way of looking at languages and the ease with which unsafe code can be written and used. We call this new perspective unsafe impedance. We then go on to use unsafe impedance to examine nine languages that are considered to be safe. Finally, we suggest that business processes include what we refer to as an Unsafe Acceptance Process. This Unsafe Acceptance Process can be used as part of the memory safe roadmaps suggested by these agencies. Unsafe Acceptance Processes can aid organizations in their production of safe by design software.
引用
收藏
页码:76 / 83
页数:8
相关论文
共 50 条
  • [1] PKRU-SAFE: Automatically Locking Down the Heap Between Safe and Unsafe Languages
    Kirth, Paul
    Dickerson, Mitchel
    Crane, Stephen
    Larsen, Per
    Dabrowski, Adrian
    Gens, David
    Na, Yeoul
    Volckaert, Stijn
    Franz, Michael
    PROCEEDINGS OF THE SEVENTEENTH EUROPEAN CONFERENCE ON COMPUTER SYSTEMS (EUROSYS '22), 2022, : 132 - 148
  • [2] TRICLOSAN - SAFE OR UNSAFE
    GRAVENS, DL
    INFECTION CONTROL AND HOSPITAL EPIDEMIOLOGY, 1985, 6 (06): : 216 - 216
  • [3] OXYGEN SAFE AND UNSAFE
    SIEGEL, BV
    PETTY, TL
    LAURENZI, GA
    NEW ENGLAND JOURNAL OF MEDICINE, 1968, 279 (18): : 1001 - +
  • [4] SAFE OR UNSAFE ON THE STREETS
    Spitzer, Peter
    Hoellwarth, Michael
    INJURY PREVENTION, 2016, 22 : A195 - A196
  • [5] FAIL SAFE - UNSAFE
    LEVIN, MJ
    BALASARASWATHI, K
    ANESTHESIOLOGY, 1978, 48 (02) : 152 - 153
  • [6] Nanomaterials: Safe or unsafe?
    Dagani, R
    CHEMICAL & ENGINEERING NEWS, 2003, 81 (17) : 30 - 33
  • [7] Milk: Safe and unsafe
    不详
    BRITISH MEDICAL JOURNAL, 1936, 1936 : 1130 - 1130
  • [8] SAFE AND UNSAFE DEMOCRACY
    不详
    EDUCATION, 1919, 39 (07): : 517 - 517
  • [9] Are there safe and unsafe drivers?
    Hakamies-Blomqvist, Liisa
    TRANSPORTATION RESEARCH PART F-TRAFFIC PSYCHOLOGY AND BEHAVIOUR, 2006, 9 (05) : 347 - 352
  • [10] Safe and Unsafe Democracy
    Nimmo, H. M.
    AMERICAN POLITICAL SCIENCE REVIEW, 1919, 13 (02) : 321 - 323