[GAP] Ada for security (rather than safety, reliability)?

Ted Baker baker at cs.fsu.edu
Tue Feb 12 22:06:58 CET 2008


It has been a while since I was on bugtraq, but as I recall it,
and my impression from the CERT mailings, is that nearly all of
the exploitable defects reported are things that Ada checks for,
like array overflows and uninitialized pointers.

Of course, the the Java folks will claim similarly, but we know
that Ada has performance advantages over Java, and the C/C++
folks cannot dodge responsibility for these vulnerabilities

--Ted

On Tue, Feb 12, 2008 at 12:58:08PM -0700, Bo Sanden wrote:
> This came up in a class discussion. I haven't researched it.
> 
> Some security vulnerabilities are caused by abusable syntax in widely 
> used languages. Are there examples where Ada has been chosen expressly 
> to avoid such vulnerabilities? If not, are there examples where security 
> has been mentioned along with other concerns such as safety or 
> reliability as reasons for choosing Ada?
> 
> Bo
> 
> 
> -- 
> Dr. Bo I. Sand?n
> Professor of Computer Science
> Colorado Technical University
> 4435 N. Chestnut Street 
> Colorado Springs, CO 80907-3896
> U.S.A.
> 
> http://member.acm.org/~bsanden
> (0719) 590-6733
> 
> 
> _______________________________________________
> GAP mailing list
> GAP at gnat.info
> /no-more-mailman.html
> To unsubscribe from this list, please contact the GAP GNAT Tracker administrator
> within your organization.
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.


More information about the GAP mailing list