Unsafe Impedance Safe Languages and Safe by Design Software

被引:0
|
作者
Barney, Lee [1 ]
Neto, Adolfo [2 ]
机构
[1] Brigham Young Univ Idaho, Rexburg, ID 83460 USA
[2] Univ Tecnol Fed Parana, Curitiba, Parana, Brazil
关键词
Memory Safe Languages; Functional Programming; Secure By Design; Secure By Default;
D O I
10.1145/3677995.3678196
中图分类号
TP31 [计算机软件];
学科分类号
081202 ; 0835 ;
摘要
In December 2023, security agencies from five countries in North America, Europe, and the south Pacific produced a document encouraging senior executives in all software producing organizations to take responsibility for and oversight of the security of the software their organizations produce. In February 2024, the White House released a cybersecurity outline, highlighting the December document. In this work we review the safe languages listed in these documents, and compare the safety of those languages with Erlang and Elixir, two BEAM languages. These security agencies' declaration of some languages as safe is necessary but insufficient to make wise decisions regarding what language to use when creating code. We propose an additional way of looking at languages and the ease with which unsafe code can be written and used. We call this new perspective unsafe impedance. We then go on to use unsafe impedance to examine nine languages that are considered to be safe. Finally, we suggest that business processes include what we refer to as an Unsafe Acceptance Process. This Unsafe Acceptance Process can be used as part of the memory safe roadmaps suggested by these agencies. Unsafe Acceptance Processes can aid organizations in their production of safe by design software.
引用
收藏
页码:76 / 83
页数:8
相关论文
共 50 条
  • [31] Universal Stem Cells: Making the Unsafe Safe
    Harding, Jeffrey
    Vintersten-Nagy, Kristina
    Nagy, Andras
    CELL STEM CELL, 2020, 27 (02) : 198 - 199
  • [32] SAFE AND UNSAFE DRUGS IN ACUTE HEPATIC PORPHYRIA
    DOSS, M
    WETTERBERG, L
    FORTSCHRITTE DER MEDIZIN, 1977, 95 (42) : 2531 - &
  • [33] Safe Haven: The Possibility of Sanctuary in an Unsafe World
    Wainwright, J. A.
    CANADIAN LITERATURE, 2008, (198): : 131 - 132
  • [34] Letrozole as an ovulation induction agent: safe or unsafe?
    Rajesh, H.
    Govindarajan, M.
    BJOG-AN INTERNATIONAL JOURNAL OF OBSTETRICS AND GYNAECOLOGY, 2014, 121 : 81 - 81
  • [35] Sociotechnical attributes of safe and unsafe work systems
    Kleiner, Brian M.
    Hettinger, Lawrence J.
    DeJoy, David M.
    Huang, Yuang-Hsiang
    Love, Peter E. D.
    ERGONOMICS, 2015, 58 (04) : 635 - 649
  • [36] SCHOOL PLAYGROUND CLIMBING EQUIPMENT - SAFE OR UNSAFE
    LANGLEY, J
    CROSADO, B
    NEW ZEALAND MEDICAL JOURNAL, 1982, 95 (713) : 540 - 542
  • [37] Safe storage of mileage on physically unsafe storage
    Dichtl, Markus
    Hess, Erwin
    Meyer, Bernd
    AUTOMOTIVE SECURITY, 2007, 2016 : 131 - 146
  • [38] Needle exchange as a safe haven in an unsafe world
    Macneil, Joan
    Pauly, Bernadette
    DRUG AND ALCOHOL REVIEW, 2011, 30 (01) : 26 - 32
  • [39] Network management for a safe communication in an unsafe environment
    Fischer, Peter
    Holz, Michael
    Menzel, Martin
    2007 5TH IEEE INTERNATIONAL CONFERENCE ON INDUSTRIAL INFORMATICS, VOLS 1-3, 2007, : 131 - 136
  • [40] Epidural catheter reconnection - Safe and unsafe practice
    Langevin, PB
    Gravenstein, N
    Langevin, SO
    Gulig, PA
    ANESTHESIOLOGY, 1996, 85 (04) : 883 - 888