In the era of the Internet there is a continuous demand for distributed systems which should serve thousands of requests on a daily basis. But with this growing demand companies have to face a growing number of cyber threats as well which can not only harm their customers in the form of data theft or data loss but their own reputation as well. In order to improve the security of the systems, there are several standards (CERT, OWASP’s Application Security Verification Standard) and static analyser tools (CodeChecker, SpotBugs, SonarQube, Fortify) to achieve this goal. Unfortunately, these tools only cover popular programming languages like C++, Java, Python or TypeScript. In this paper, we present a prototype for supporting secure coding with RefactorErl which helps identifying vulnerabilities like OS injection, cryptography or atom exhaustion related attacks in Erlang systems.
Sun 23 Aug Times are displayed in time zone: (GMT-04:00) Eastern Time (US & Canada) change
|07:50 - 08:00|
|08:00 - 08:30|
Boldizsár PoórEötvös Loránd University, Melinda TothEötvös Loránd University, Faculty of Informatics, Department of Programming Languages and Compilers & ELTE-Soft Nonprofit Ltd., István BozóEötvös Loránd UniversityDOI
|08:30 - 09:00|
|09:00 - 09:30|
Peter ZellerTU Kaiserslautern, Annette BieniusaTechnische Universität Kaiserslautern, Carla FerreiraUniversidade Nova LisboaDOI