4 ms·
> A method to reliably produce vulnerability-free software is not invented yet. I beg to differ. We have formal methods, ranging from type systems to full blow
by DanWaterworth 9y ago
> A method to reliably produce vulnerability-free software is not invented yet.
I beg to differ. We have formal methods, ranging from type systems to full blown verification. This isn't a technical problem, it's an economic one.
- ComodoHacker 9y agoHad these methods been applied to security aspect of software development? Any examples?
- DanWaterworth 9y agoOn the lower end of the spectrum, sound type systems prevent a class of vulnerabilities including buffer overflows. On the upper end, https://sel4.systems/ https://sel4.systems/, a formally verified microkernel, is used in security-critical systems.