SPLASH 2014
Mon 20 - Fri 24 October 2014 Portland, Oregon, United States
Tue 21 Oct 2014 15:30 - 15:52 at Salon D - Session 4 Chair(s): Thomas LaToza

Breaches of software security affect millions of people, and therefore it is crucial to strive for more secure software systems. However, the effect of programming language design on software security is not easily measured or studied. In the absence of scientific insight, opinions range from those that claim that programming language design has no effect on security of the system, to those that believe that programming language design is the only way to provide “high-assurance software.” In this paper, we discuss how programming language design can impact software security by looking at a specific example: the Wyvern programming language. We report on how the design of the Wyvern programming language leverages security principles, together with hypotheses about how usability impacts security, in order to prevent command injection attacks. Furthermore, we discuss what security principles we considered in Wyvern’s design.

Tue 21 Oct

plateau2014
15:30 - 17:00: PLATEAU - Session 4 at Salon D
Chair(s): Thomas LaTozaUniversity of California, Irvine
plateau2014141389820000015:30 - 15:52
Talk
Darya MelicherCarnegie Mellon University, Alex PotaninVictoria University of Wellington, Jonathan AldrichCarnegie Mellon University
File Attached
plateau2014141389955000015:52 - 16:15
Talk
Michael CoblenzCarnegie Mellon University, Jonathan AldrichCarnegie Mellon University, Brad MyersCarnegie Mellon University, Joshua SunshineCarnegie Mellon University
File Attached
plateau2014141390090000016:15 - 16:37
Talk
Jonathan AldrichCarnegie Mellon University, Joshua SunshineCarnegie Mellon University
File Attached
plateau2014141390225000016:37 - 17:00
Other