Some Thoughts on Security After Ten Years of qmail 1.0

被引：13

作者：

Bernstein, Daniel J. ^{[1
]}

机构：

[1] Univ Illinois, Dept Math Stat & Comp Sci, Chicago, IL 60607 USA

来源：

CSAW'07: PROCEEDINGS OF THE 2007 ACM COMPUTER SECURITY ARCHITECTURE WORKSHOP | 2007年

关键词：

Eliminating bugs; eliminating code; eliminating trusted code;

D O I：

10.4272/978-84-9745-157-4.ch1

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

The qmail software package is a widely used Internet-mail transfer agent that has been covered by a security guarantee since 1997. In this paper, the qmail author reviews the history and security-relevant architecture of qmail; articulates partitioning standards that qmail fails to meet; analyzes the engineering that has allowed qmail to survive this failure; and draws various conclusions regarding the future of secure programming.

引用

页码：1 / 10

页数：10