Cyclone: A Safe Dialect of C
From: aleph1@securityfocus.comDate: 05/24/02
- Previous message: Glynn Clements: "Re: CGI security on a shared web server (fwd)"
- Next in thread: Ben Laurie: "Re: Cyclone: A Safe Dialect of C"
- Reply: Ben Laurie: "Re: Cyclone: A Safe Dialect of C"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 24 May 2002 12:28:20 -0600 From: aleph1@securityfocus.com To: secpapers@securityfocus.com
Cyclone: A Safe Dialect of C
Trevor Jim, Greg Morrisett, Dan Grossman, Michael Hicks, James Cheney,
and Yanling Wang. USENIX Annual Technical Conference, Monterey, CA, June 2002.
Cyclone is a safe dialect of C. It has been designed
from the ground up to prevent the buffer overflows,
format string attacks, and memory management errors
that are common in C programs, while retaining
C's syntax and semantics. This paper examines
safety violations enabled by C's design, and shows
how Cyclone avoids them, without giving up C's
hallmark control over low-level details such as data
representation and memory management.
http://www.research.att.com/projects/cyclone/papers/cyclone-safety.ps
http://www.research.att.com/projects/cyclone/papers/cyclone-safety.pdf
http://www.research.att.com/projects/cyclone/papers/cyclone-safety.dvi
-- Elias Levy SecurityFocus http://www.securityfocus.com/ Si vis pacem, para bellum
- Previous message: Glynn Clements: "Re: CGI security on a shared web server (fwd)"
- Next in thread: Ben Laurie: "Re: Cyclone: A Safe Dialect of C"
- Reply: Ben Laurie: "Re: Cyclone: A Safe Dialect of C"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|