Eliminating Memory Safety Vulnerabilities: A Collective Commitment to Secure-by-Design

For decades, memory safety vulnerabilities have plagued the tech industry, costing billions and eroding trust. Traditional approaches haven't been enough. This post calls for a fundamental shift towards 'secure-by-design' practices to eliminate these vulnerabilities. Recent advancements in memory-safe languages (like Rust) and hardware technologies (like ARM's MTE) make this achievable. The authors propose a standardized framework to objectively assess memory safety assurances, incentivizing vendors to invest and ultimately empowering customers to demand and reward security, driving procurement of more secure systems. This requires a technology-neutral framework supporting diverse approaches, adapting safety requirements based on need, ultimately aiming for a secure digital world.