Software Security Ideas Ahead of Their Time

Summary: Trail of Bits highlights a guest post by Andrew Ruef, a Trail of Bits employee and UMD PhD student, for Michael Hicks's blog The Programming Language Enthusiast, on software security ideas that were ahead of their time. The post examines a 20-year-old email exchange on the "firewalls" mailing list from 1995, before the publication of Smashing the Stack for Fun and Profit, in which casual observers anticipated problems and solutions now central to software security research.
Bottom line: The ideas in that 1995 firewalls thread sat unclaimed for two decades before becoming cutting-edge research, which means the vulnerabilities your team treats as novel may already have been named and set aside by someone years ago.

Read the original at Trail of Bits Blog ↗