Towards a systematic approach to memory safety: a case study integrating techniques and practices over the software development life cycle (SDLC)
Conference paper
Tonini, I., Nalli, G., Piras, L., De Matteis, P., Kapetanakis, S. and Ranise, S. 2025. Towards a systematic approach to memory safety: a case study integrating techniques and practices over the software development life cycle (SDLC). Barolli, L., Ishida, T. and Dantas, M. (ed.) 20th International Conference on P2P, Parallel, Grid, Cloud and Internet Computing. Sharjah, United Arab Emirates 12 - 14 Nov 2025 Springer. pp. 147-159 https://doi.org/10.1007/978-3-032-10344-4_14
| Type | Conference paper |
|---|---|
| Title | Towards a systematic approach to memory safety: a case study integrating techniques and practices over the software development life cycle (SDLC) |
| Authors | Tonini, I., Nalli, G., Piras, L., De Matteis, P., Kapetanakis, S. and Ranise, S. |
| Abstract | Safe memory management is a crucial pillar in modern programming and cybersecurity, essential to prevent vulnerabilities and errors that can compromise the reliability and security of computer systems. Memory safety problems, as evidenced by many cases (e.g., Wannacry and Crowdstrike) can have a devastating impact on the entire Trusted Computing Base (TCB) of organisations. Despite such important issues, there is still a lack of standardised frameworks, methods, and tools able to guide software engineers in a systematic consideration and mitigation of software memory safety during the entire Software Development Life Cycle (SDLC). In this work, we propose a first attempt towards an approach that contextualises and considers, within the SDLC, main issues related to memory safety, and proposes guidelines to apply specific techniques for reducing potential memory safety risks. Specifically, our approach is pragmatic and oriented towards the industry, with the aim of helping organisations to individuate the parts where memory safety issues more often occur, and to mitigate such problems contextually to a secure SDLC. The concept of memory safety is introduced, followed by an overview of the main classes of vulnerabilities, and then by an in-depth analysis of the applicable mitigation techniques. We present our approach and a case study as an initial application of our approach, and exemplification of concepts related to it. The main contribution of this work consists in the systematization of mitigation techniques deriving from memory management problems, according to the SDLC, and in the practical demonstration of their effectiveness in a case study. |
| Keywords | memory leaks; memory safety; software development life cycle |
| Sustainable Development Goals | 9 Industry, innovation and infrastructure |
| Middlesex University Theme | Creativity, Culture & Enterprise |
| Conference | 20th International Conference on P2P, Parallel, Grid, Cloud and Internet Computing |
| Page range | 147-159 |
| Proceedings Title | Advances on P2P, Parallel, Grid, Cloud and Internet Computing: The 20th International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC-2025). Online Conference |
| Series | Lecture Notes on Data Engineering and Communications Technologies |
| Editors | Barolli, L., Ishida, T. and Dantas, M. |
| ISSN | 2367-4512 |
| Electronic | 2367-4520 |
| ISBN | |
| Paperback | 9783032103437 |
| Electronic | 9783032103444 |
| Publisher | Springer |
| Publication dates | |
| Online | 13 Nov 2025 |
| 14 Dec 2025 | |
| Publication process dates | |
| Accepted | 2025 |
| Deposited | 13 Nov 2025 |
| Output status | Published |
| Accepted author manuscript | File Access Level Open |
| Copyright Statement | This version of the contribution has been accepted for publication, after peer review (when applicable) but is not the Version of Record and does not reflect post-acceptance improvements, or any corrections. The Version of Record is available online at: http://dx.doi.org/10.1007/978-3-032-10344-4_14. Use of this Accepted Version is subject to the publisher’s Accepted Manuscript terms of use https://www.springernature.com/gp/open-research/policies/accepted-ma... |
| Digital Object Identifier (DOI) | https://doi.org/10.1007/978-3-032-10344-4_14 |
| Web address (URL) of conference proceedings | https://doi.org/10.1007/978-3-032-10344-4 |
https://repository.mdx.ac.uk/item/2yx231
Restricted files
Accepted author manuscript
32
total views2
total downloads9
views this month0
downloads this month