Các lỗ hổng có thể ngăn chặn được

Khái niệm::

• Heartbleed would not have happened if the language used could guard against a Buffer Over-Read.
• SQL Injections might not happen if there was a language enforced way to encode/decode HTML data
• Sensitive data can be saved to Pagefiles in some languages where low-level controls of securely erasing memory aren’t available.
• Pointer issues/overflows occur more often in C when compared to managed code
• Numerical rounding errors can occur when using the developer uses the wrong datatype for the wrong data
• Denial Of Service attacks might be reduced if the app is correctly is multi-threaded
• Code signing may reduce the threat of runtime security issues (link, link)

Nguồn:: Are there “secure” languages? (closed)