Crema: A LangSec-inspired Language

Presented at BSidesLV 2015, Aug. 4, 2015, 5 p.m. (55 minutes).

We discuss the potential for significant reduction in the size and complexity of verification tasks for input-handling software when such software is constructed according to LangSec principles, i.e., is designed as a recognizer for a particular language of valid inputs and is compiled for a suitably limited computational model no stronger than needed for the recognition task. We will demo Crema, an open-source programming language and restricted execution environment of sub-Turing power.

Presenters:

• Jacob Torrey - Advising Engineer - Assured Information Security, Inc.
  Jacob Torrey is an Advising Research Engineer at Assured Information Security, Inc. where he leads the Computer Architectures group and acts as the site lead for the Colorado branch. Jacob has worked extensively with low-level x86 and MCU architectures, having written a BIOS, OS, hypervisor and SMM handler. His major interest is how to (mis)use an existing architecture to implement a capability currently beyond the limitations of the architecture.

Links:

• https://bsideslv2015.sched.com/event/3udX/crema-a-langsec-inspired-language
• https://infocon.org/cons/Security BSides/BSides Las Vegas/BSides Las Vegas 2015/Crema A LangSec inspired Language Sergey Bratus Jacob Torrey.mp4
• https://www.youtube.com/watch?v=_JJCgHF4hoY

Similar Presentations:

• AppSec USA 2016 / Lightning Talk - LANGSEC 101: Taking the Theory Mainstream
• ToorCamp 2018 / Sub-Turing Machines: The End of Unknown Unknowns: How to apply LangSec principles to everything you see
• ShmooCon XIII (2017) / LangSec for Penetration Testing: How and Why