Unsafe Impedance Safe Languages and Safe by Design Software

被引:0
|
作者
Barney, Lee [1 ]
Neto, Adolfo [2 ]
机构
[1] Brigham Young Univ Idaho, Rexburg, ID 83460 USA
[2] Univ Tecnol Fed Parana, Curitiba, Parana, Brazil
关键词
Memory Safe Languages; Functional Programming; Secure By Design; Secure By Default;
D O I
10.1145/3677995.3678196
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
In December 2023, security agencies from five countries in North America, Europe, and the south Pacific produced a document encouraging senior executives in all software producing organizations to take responsibility for and oversight of the security of the software their organizations produce. In February 2024, the White House released a cybersecurity outline, highlighting the December document. In this work we review the safe languages listed in these documents, and compare the safety of those languages with Erlang and Elixir, two BEAM languages. These security agencies' declaration of some languages as safe is necessary but insufficient to make wise decisions regarding what language to use when creating code. We propose an additional way of looking at languages and the ease with which unsafe code can be written and used. We call this new perspective unsafe impedance. We then go on to use unsafe impedance to examine nine languages that are considered to be safe. Finally, we suggest that business processes include what we refer to as an Unsafe Acceptance Process. This Unsafe Acceptance Process can be used as part of the memory safe roadmaps suggested by these agencies. Unsafe Acceptance Processes can aid organizations in their production of safe by design software.
引用
收藏
页码:76 / 83
页数:8
相关论文
共 50 条
  • [21] Modeling safe and unsafe driving behaviour
    Verschuur, William L. G.
    Hurts, Karel
    ACCIDENT ANALYSIS AND PREVENTION, 2008, 40 (02): : 644 - 656
  • [22] SAFE AND UNSAFE BEHAVIOR AND ITS MODIFICATION
    FITCH, HG
    HERMANN, J
    HOPKINS, BL
    JOURNAL OF OCCUPATIONAL AND ENVIRONMENTAL MEDICINE, 1976, 18 (09) : 618 - 622
  • [23] Safe anaesthesia in unsafe corners of the world
    Janjanin, Sanja
    Lufinha, Ana
    Berry, Colin
    TRENDS IN ANAESTHESIA AND CRITICAL CARE, 2018, 22 : 17 - 21
  • [24] Unsafe and potentially safe herbal therapies
    Klepser, TB
    Klepser, ME
    AMERICAN JOURNAL OF HEALTH-SYSTEM PHARMACY, 1999, 56 (02) : 125 - 138
  • [25] Contribution of the unsafe acts analysis to safe design and application to the printing sector
    De la Garza, C
    Fadier, E
    PROBABILISTIC SAFETY ASSESSMENT AND MANAGEMENT, VOL I AND II, PROCEEDINGS, 2002, : 465 - 471
  • [26] On proving that an unsafe controller is not proven safe
    Selvaraj, Yuvaraj
    Krook, Jonas
    Ahrendt, Wolfgang
    Fabian, Martin
    JOURNAL OF LOGICAL AND ALGEBRAIC METHODS IN PROGRAMMING, 2024, 137
  • [27] Eventually Safe Languages
    Iosti, Simon
    Kuperberg, Denis
    DEVELOPMENTS IN LANGUAGE THEORY, DLT 2019, 2019, 11647 : 192 - 205
  • [28] Safe, effective, and reliable software design and development
    Fries, Richard C.
    Pienkowski, Paul J.
    Jorgens III, Joseph
    Biomedical Instrumentation and Technology, 1996, 30 (02): : 136 - 149
  • [29] Home birth is unsafe: AGAINST: Safe for whom?
    Cheyney, Melissa
    Bovbjerg, Marit L.
    Burcher, Paul
    BJOG-AN INTERNATIONAL JOURNAL OF OBSTETRICS AND GYNAECOLOGY, 2015, 122 (09) : 1235 - 1235
  • [30] CHEMICAL DEMONSTRATIONS - MAGIC OR SCIENCE - SAFE OR UNSAFE
    PERKISN, RI
    ABSTRACTS OF PAPERS OF THE AMERICAN CHEMICAL SOCIETY, 1989, 197 : 156 - CHED