Murphy vs Satan: Why programming secure systems is still hard
In 2005, Ross Anderson and Roger Needham coined the phrase "Programming Satan's Computer" to describe the problems of developing software for secure systems. Their point is illustrated by whatever is the latest high-profile bug, "celebrity glitch", or downright embarrassment in some piece of critical software that is supposed to be trustworthy. It might seem industry is unable to produce software with even the most basic levels of integrity (e.g. "it doesn't crash") let alone subtle application-specific security properties. Is the situation really that bad? Can we do better, based on what we know from over twenty years of building safety-related systems? This talk will reflect on my experience of deploying safety-critical software process and technology in building secure systems, but will also touch on the behaviours and economic pressures that seem to be holding back progress.


