I'd like to know more details of the concurrency system. The best of today are mainly Eiffel's SCOOP (+ academic advances on it) and Rust's model from what I hear. The more models to consider and improve on the merrier.
The trouble with computer security "defense in depth" is that it only protects against inept attackers. An attacker with resources can get through multiple levels of weak security. Example: StuxNet.
Usually true. That's why high assurance security tried to identify the root causes of problems, formalize security schemes to stop/limit them, formalize designs, and show correspondence. Worked in many situations, not as much in others.
With defense in depth, inherently insecure OS's, libraries, and so on mean extra layers = some extra time/effort. We also know that software markets concentrate into a small number of products in each category that get dominant. We also know nation states and malware authors specialize and increase efficiency similar to markets with effort focused on greatest gains. So, naturally, these combine to dramatically reduce odds one will be safe if they're using popular combinations of hardware, OS's, and software.
High assurance is still necessary. At least at the level of CPU's, kernels, type systems, protocols, and so on. The critical stuff everything else depends on. Rest might be contained or detected running on right architecture.
7 comments
[ 3.5 ms ] story [ 21.8 ms ] threadWith defense in depth, inherently insecure OS's, libraries, and so on mean extra layers = some extra time/effort. We also know that software markets concentrate into a small number of products in each category that get dominant. We also know nation states and malware authors specialize and increase efficiency similar to markets with effort focused on greatest gains. So, naturally, these combine to dramatically reduce odds one will be safe if they're using popular combinations of hardware, OS's, and software.
High assurance is still necessary. At least at the level of CPU's, kernels, type systems, protocols, and so on. The critical stuff everything else depends on. Rest might be contained or detected running on right architecture.