SPLASH 2020
Sun 15 - Sat 21 November 2020 Online Conference
Tue 17 Nov 2020 22:00 - 22:20 at SPLASH-III - T-2-Onward Chair(s): Jonathan Edwards
Tue 17 Nov 2020 10:00 - 10:20 at SPLASH-III - T-2-Onward Chair(s): Avraham Shinnar

As the impact of vulnerabilities increases in practice, it is imperative for programming languages to include security as a first-class design consideration. While a number of security-related language features have been proposed to address this need, in many cases, we do not know enough about whether it is practical and useful to build software systems in languages with these features.

In this paper, we begin to investigate this question, using a case study methodology. The setting of our case study is Wyvern, a recently designed language we selected because it incorporates three advanced security-related features: capability safety for enforcing the principle of least privilege, an effect system for tracking the secure use of resources, and a language extension feature that mitigates command injection. In our case study, we built a small standard I/O library, seeking to use the new language features to create a library that is less vulnerable to misuse and can serve as a building block for more secure programs, compared to conventional I/O library designs. Our study suggests that these features are indeed practicable and useful, and thus potentially promising for inclusion in other future language designs. It also sheds light on the value and cost of these features and suggests directions for future research on security-focused language design.

Tue 17 Nov
Times are displayed in time zone: Central Time (US & Canada) change

09:00 - 10:20: T-2-OnwardOnward! Papers / Onward! Essays at SPLASH-III +12h
Chair(s): Avraham ShinnarIBM Research
09:00 - 09:20
Talk
Onward! Papers
Fabio NiephausHasso Plattner Institute, University of Potsdam, Patrick ReinHasso Plattner Institute, Jakob EddingHasso Plattner Institute, University of Potsdam, Jonas HeringHasso Plattner Institute, University of Potsdam, Bastian KönigHasso Plattner Institute, University of Potsdam, Kolya OpahleHasso Plattner Institute, University of Potsdam, Nico ScordialoHasso Plattner Institute, University of Potsdam, Robert HirschfeldHasso-Plattner-Institut (HPI), Germany
Link to publication DOI Pre-print Media Attached
09:20 - 09:40
Talk
Onward! Papers
Link to publication Pre-print
09:40 - 10:00
Talk
Onward! Essays
Marc RonellU.S. Federal Aviation Administration
Link to publication DOI
10:00 - 10:20
Talk
Onward! Papers
Jennifer FishCarnegie Mellon University, Darya MelicherGoogle, Jonathan AldrichCarnegie Mellon University
Link to publication
21:00 - 22:20: T-2-OnwardOnward! Papers / Onward! Essays at SPLASH-III
Chair(s): Jonathan Edwards
21:00 - 21:20
Talk
Onward! Papers
Fabio NiephausHasso Plattner Institute, University of Potsdam, Patrick ReinHasso Plattner Institute, Jakob EddingHasso Plattner Institute, University of Potsdam, Jonas HeringHasso Plattner Institute, University of Potsdam, Bastian KönigHasso Plattner Institute, University of Potsdam, Kolya OpahleHasso Plattner Institute, University of Potsdam, Nico ScordialoHasso Plattner Institute, University of Potsdam, Robert HirschfeldHasso-Plattner-Institut (HPI), Germany
Link to publication DOI Pre-print Media Attached
21:20 - 21:40
Talk
Onward! Papers
Link to publication Pre-print
21:40 - 22:00
Talk
Onward! Essays
Marc RonellU.S. Federal Aviation Administration
Link to publication DOI
22:00 - 22:20
Talk
Onward! Papers
Jennifer FishCarnegie Mellon University, Darya MelicherGoogle, Jonathan AldrichCarnegie Mellon University
Link to publication