AI DevwWrld Chatbot Summit Cyber Revolution Summit CYSEC Global Cyber Security & Cloud Expo World Series Digital Identity & Authentication Summit Asian Integrated Resort Expo Middle East Low Code No Code Summit TimeAI Summit

Expert recommends: forget C and C++ for greater security

Cyber security: the challenge of the modern era between obsolete languages and innovation

US experts warn of security risks in the C and C++ programming languages, which leave memory management to developers. More secure languages such as Rust or Go are recommended.

This pill is also available in Italian language

US cybersecurity experts warn of the risks inherent in the use of C and C++, highlighting how these legacy technologies are no longer adequate for modern application security standards. Unlike newborn languages, which integrate automatic memory control systems, C and C++ entrust this task to developers with consequent possible negligence.

The risks associated with manual memory management

Efficiency and direct control are the advantages of C and C++ which, however, turn into defects when it comes to security. Manual memory management in these languages can easily result in vulnerabilities, such as the well-known buffer overflow problem, exposing sensitive software to potential malicious attacks that can compromise data and systems.

Microsoft and Google's conclusions on C and C++

Recent studies by technology giants, such as Microsoft in 2019 and Google in 2020, have confirmed that a preponderant share of software vulnerabilities derives from memory-related issues, mainly found in code written in C or C++. This statistic highlights the essential need for a shift towards more secure programming languages.

Safer languages recommended by the Office of the National Cyber Director

The US Office of the National Cyber Director recommends that developers adopt languages that promote automatic and secure memory management. These include Rust, Go, C#, Java, Swift, JavaScript, and Ruby. Rust in particular is at the center of kernel renewal projects for operating systems and browsers, as demonstrated by its growing use in critical environments.

Follow us on Twitter for more pills like this

03/01/2024 12:12

Editorial AI

Last pills

Career opportunities in Italian intelligence: entering the heart of securityFind out how to join the intelligence forces and contribute to national security

Hacker attack impacts Microsoft and US federal agenciesNational security implications and strategic responses to credential theft

Implications and repercussions of the serious cyberattack on the Lazio NHSConsequences and punitive measures after the ransomware attack that brought the regional healthcare system to its knees

Telecommunications security: flaw exposes conversations and 2FA to the risk of interceptionRisk of privacy violation through call diversion: measures and industry responses