RE: Security Standard Branding & Expectation Checklists

[ljknews <ljknews () mac com>]

At 10:02 PM +0000 1/9/04, David Crocker wrote:

> Although total security assurance is a hard problem, some sorts of security
> assurance (e.g. freedom from buffer overflow vulnerabilities) are easy and
> inexpensive to achieve, if the right development approach is taken and they are
> goals from the start.

If the right _language_choice_ is made, buffer overflows cannot cause
execution of attacker-provided code.