Secure Coding mailing list archives

Harvard vs. von Neumann

From: ljknews at mac.com (ljknews)
Date: Mon, 11 Jun 2007 10:46:19 -0400

At 9:00 AM -0400 6/11/07, Gary McGraw wrote:

If we assumed perfection at the implementation level (through better
languages, say), then we would end up solving roughly 50% of the
software security problem.

Clearly we need to make some progress at the architecture/design level
to attain reasonable levels of software security.

Perfect languages won't solve the software security problem.


And neither will perfect designs.

Both approaches needed.

But a large percentage of failures that result from weak languages are
already categorized in standard terms like "buffer overflow".
-- 
Larry Kilgallen

Current thread:

FW: What's the next tech problem to be solvedin softwaresecurity?, (continued)
- - - FW: What's the next tech problem to be solvedin softwaresecurity? ljknews (Jun 10)
    - FW: What's the next tech problem to be solvedin softwaresecurity? Robert C. Seacord (Jun 10)
    - Harvard vs. von Neumann Blue Boar (Jun 10)
    - Harvard vs. von Neumann der Mouse (Jun 10)
    - Harvard vs. von Neumann Blue Boar (Jun 11)
    - Harvard vs. von Neumann Crispin Cowan (Jun 10)
    - Harvard vs. von Neumann David Crocker (Jun 11)
    - Harvard vs. von Neumann der Mouse (Jun 11)
    - Harvard vs. von Neumann David Crocker (Jun 11)
    - Harvard vs. von Neumann Gary McGraw (Jun 11)
    - Harvard vs. von Neumann ljknews (Jun 11)
    - Harvard vs. von Neumann Crispin Cowan (Jun 11)
    - The Specifications of the Thing Michael S Hines (Jun 12)
    - The Specifications of the Thing Steven M. Christey (Jun 12)
    - Harvard vs. von Neumann Steven M. Christey (Jun 12)
    - Harvard vs. von Neumann Crispin Cowan (Jun 12)
    - Harvard vs. von Neumann Blue Boar (Jun 12)
    - Harvard vs. von Neumann Steven M. Christey (Jun 12)
    - What's the next tech problem to be solved in software security? Kenneth Van Wyk (Jun 10)
    - What's the next tech problem to be solved in softwaresecurity? McGovern, James F (HTSC, IT) (Jun 11)
    - What's the next tech problem to be solved in softwaresecurity? Gary McGraw (Jun 11)