From e69951fe71f2b5f0c5a928b6d1c28874a8114afd Mon Sep 17 00:00:00 2001 From: Stefan Junker Date: Mon, 11 Sep 2017 22:53:38 +0200 Subject: [PATCH] README: keep track of the common thread --- README.md | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/README.md b/README.md index 7ae1c92..7a34020 100644 --- a/README.md +++ b/README.md @@ -1 +1,26 @@ # Using Static Code Analysis To Improve Kernel-Task Memory-Safety + +# Simple Motivational Golden Circle +* Describes what this project is about very briefly +* Helps to keep track of the goals + +## Who? +* Primariliy: OS Software Developers +* Secondary: End Users + +## Why? +* The Linux/C/C++ software is full of vulnerabilities +* A human solution is not reliable: + - Developers make mistakes anyway! +* C/C++ Compilers allow too many mistakes +* Hardware-supported memory-management with stack/heap is hard to implement safely +* Rust is a promising language + +## How? +* Look for a *technical* solution for these issues by first analyzing the status quo: + - Which popular systems are most vulnerable? + - What exact software situations cause these vulnerabilities? +* Look through CVE database + +## What? +* Find out if Rust can help with memory safety within the OS