article · 2003
Insecure programming: how culpable is a language's syntax
R. Chinchani, A. Iyer, B. Jayaraman, S. Upadhyaya
Cited by 0Abstract and details only
Abstract
Abstract — Vulnerabilities in software stem from poorly written code by programmers who are not aware of its security implications or some inadvertent errors that may have crept in. Writing secure code is largely a software engineering issue requiring the education of programmers about safe coding practices. Various projects and efforts such as memory usage profiling, meta-compilation and typing proofs that check correctness of the code at compile-time and runtime provide additional assistance in this regard. In this paper, we point out that in the context of security, one aspect that is perhaps underrated or overlooked is that errors could arise due to the syntax of a programming language. We show that it is possible to make very subtle errors with serious consequences. Our work will help caution programmers on the types of errors to avoid as well as serve as a guideline for language designers to lay emphasis not only on richness of language features but also the syntax of the language.
Cite this paper
Chinchani, R., Iyer, A., Jayaraman, B., & Upadhyaya, S. (2003). Insecure programming: how culpable is a language's syntax.
Chinchani, R., et al. “Insecure programming: how culpable is a language's syntax.” 2003.
Chinchani, R., A. Iyer, B. Jayaraman, and S. Upadhyaya. 2003. “Insecure programming: how culpable is a language's syntax.”
Chinchani, R. et al. (2003) ‘Insecure programming: how culpable is a language's syntax’.
@article{chinchani2003insecure,
title = {{Insecure programming: how culpable is a language's syntax}},
author = {Chinchani, R. and Iyer, A. and Jayaraman, B. and Upadhyaya, S.},
year = {2003}
}Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.