Mon 20 - Fri 24 October 2014 Portland, Oregon, United States
Tue 21 Oct 2014 15:30 - 15:52 at Salon D - Session 4 Chair(s): Thomas LaToza

Breaches of software security affect millions of people, and therefore it is crucial to strive for more secure software systems. However, the effect of programming language design on software security is not easily measured or studied. In the absence of scientific insight, opinions range from those that claim that programming language design has no effect on security of the system, to those that believe that programming language design is the only way to provide “high-assurance software.” In this paper, we discuss how programming language design can impact software security by looking at a specific example: the Wyvern programming language. We report on how the design of the Wyvern programming language leverages security principles, together with hypotheses about how usability impacts security, in order to prevent command injection attacks. Furthermore, we discuss what security principles we considered in Wyvern’s design.

Tue 21 Oct
Times are displayed in time zone: (GMT-07:00) Tijuana, Baja California change

15:30 - 17:00: PLATEAU - Session 4 at Salon D
Chair(s): Thomas LaTozaUniversity of California, Irvine
plateau201415:30 - 15:52
Darya MelicherCarnegie Mellon University, Alex PotaninVictoria University of Wellington, Jonathan AldrichCarnegie Mellon University
File Attached
plateau201415:52 - 16:15
Michael CoblenzCarnegie Mellon University, Jonathan AldrichCarnegie Mellon University, Brad MyersCarnegie Mellon University, Joshua SunshineCarnegie Mellon University
File Attached
plateau201416:15 - 16:37
Jonathan AldrichCarnegie Mellon University, Joshua SunshineCarnegie Mellon University
File Attached
plateau201416:37 - 17:00