"Microsoft Looks to Rust Language to Beat Memory Vulnerabilities"

Microsoft has been working on a project called Project Verona. This project is an ambitious plan to stop common vulnerabilities hiding in old Windows code by using an implementation of the open-source Rust programming language. Traditionally Microsoft Windows software requiring fine control, such as device drivers, low-level OS functions such as storage and memory management, has been written in C or C++. Software requiring fine control comes at the expense of mistakes that lead to insecure code, particularly memory issues, which account for up to 70% of the vulnerabilities that Microsoft finds itself patching later. Rust has built-in protections against common memory problems such as use after free, type confusion, heap and stack corruption, and uninitialized use. Mozilla has already implemented Rust. However, Microsoft’s Rust implementation is more complicated because the software needs more capabilities to work across a broader range of components. It is still not clear when  Rust programing language might be implemented on Microsoft software used by customers, but it is starting to look inevitable at the current rate of progress.

Naked Security reports: "Microsoft Looks to Rust Language to Beat Memory Vulnerabilities"

 

Submitted by Anonymous on