Telegram Group & Telegram Channel
NSA 鼓励使用内存安全语言

2025-06-30 18:53 by 少年侠

美国 CISA 和 NSA 上周发布报告,督促程序员使用内存安全语言。报告称,内存安全的重要性怎样强调都不过分。大型软件项目曝出的大部分漏洞都属于内存安全漏洞,以 Google Android 系统为例,2018 年九成的高危漏洞是内存安全漏洞;Google 另一个开源浏览器项目 Chromium 在 2017 年逾七成的严重漏洞是内存安全漏洞。OpenSSL 著名的 Heartbleed 漏洞就是 C 代码内存安全错误(越界读取)导致的。本月中旬发生的 Google Cloud 宕机事故也被归因于缺乏对空指针的正确错误处理。CISA/NSA 的报告承认,内存安全语言不是解决所有问题的良药,而大型代码库要过渡到内存安全语言如 Rust 面临很多挑战。但其优势是提高可靠性、减少攻击面以及降低长期成本。以 Google 为例,通过采用内存安全语言 2024 年 Android 内存安全漏洞数量减少到总数的 24%。

www.theregister.com/2025/06/27/cisa_nsa_call_formemory_safe_languages/
https://media.defense.gov/2025/Jun/23/2003742198/-1/-1/0/CSI_MEMORY_SAFE_LANGUAGES_REDUCING_VULNERABILITIES_IN_MODERN_SOFTWARE_DEVELOPMENT.PDF

#软件



tg-me.com/solidot/27433
Create:
Last Update:

NSA 鼓励使用内存安全语言

2025-06-30 18:53 by 少年侠

美国 CISA 和 NSA 上周发布报告,督促程序员使用内存安全语言。报告称,内存安全的重要性怎样强调都不过分。大型软件项目曝出的大部分漏洞都属于内存安全漏洞,以 Google Android 系统为例,2018 年九成的高危漏洞是内存安全漏洞;Google 另一个开源浏览器项目 Chromium 在 2017 年逾七成的严重漏洞是内存安全漏洞。OpenSSL 著名的 Heartbleed 漏洞就是 C 代码内存安全错误(越界读取)导致的。本月中旬发生的 Google Cloud 宕机事故也被归因于缺乏对空指针的正确错误处理。CISA/NSA 的报告承认,内存安全语言不是解决所有问题的良药,而大型代码库要过渡到内存安全语言如 Rust 面临很多挑战。但其优势是提高可靠性、减少攻击面以及降低长期成本。以 Google 为例,通过采用内存安全语言 2024 年 Android 内存安全漏洞数量减少到总数的 24%。

www.theregister.com/2025/06/27/cisa_nsa_call_formemory_safe_languages/
https://media.defense.gov/2025/Jun/23/2003742198/-1/-1/0/CSI_MEMORY_SAFE_LANGUAGES_REDUCING_VULNERABILITIES_IN_MODERN_SOFTWARE_DEVELOPMENT.PDF

#软件

BY Solidot


Warning: Undefined variable $i in /var/www/tg-me/post.php on line 283

Share with your friend now:
tg-me.com/solidot/27433

View MORE
Open in Telegram


Solidot Telegram | DID YOU KNOW?

Date: |

Telegram has exploded as a hub for cybercriminals looking to buy, sell and share stolen data and hacking tools, new research shows, as the messaging app emerges as an alternative to the dark web.An investigation by cyber intelligence group Cyberint, together with the Financial Times, found a ballooning network of hackers sharing data leaks on the popular messaging platform, sometimes in channels with tens of thousands of subscribers, lured by its ease of use and light-touch moderation.

How Does Bitcoin Work?

Bitcoin is built on a distributed digital record called a blockchain. As the name implies, blockchain is a linked body of data, made up of units called blocks that contain information about each and every transaction, including date and time, total value, buyer and seller, and a unique identifying code for each exchange. Entries are strung together in chronological order, creating a digital chain of blocks. “Once a block is added to the blockchain, it becomes accessible to anyone who wishes to view it, acting as a public ledger of cryptocurrency transactions,” says Stacey Harris, consultant for Pelicoin, a network of cryptocurrency ATMs. Blockchain is decentralized, which means it’s not controlled by any one organization. “It’s like a Google Doc that anyone can work on,” says Buchi Okoro, CEO and co-founder of African cryptocurrency exchange Quidax. “Nobody owns it, but anyone who has a link can contribute to it. And as different people update it, your copy also gets updated.”

Solidot from us


Telegram Solidot
FROM USA