Python May Let Security Tools See What Operations the Runtime Is Performing

guest · May 28, 2018

Python May Let Security Tools See What Operations the Runtime Is Performing
May 28, 2018
https://www.bleepingcomputer.com/ne...ee-what-operations-the-runtime-is-performing/

A new feature proposal for the Python programming language wants to add "transparency" to the runtime and let security and auditing tools view when Python may be running potentially dangerous operations.
PEP-551 proposes two new APIs for Python
But in Python Enhancement Proposal 551 (PEP-551), Steve Dower, a core Python developer, has proposed the addition of two new APIs that will let security tools detect when Python is executing potentially dangerous operations.

"We propose two API changes to enable this: an Audit Hook and Verified Open Hook," Dower says. "Both are not set by default, and both require modifications to the entry point binary to enable any functionality."

Python is the second major scripting engine that is addressing the issue of "security optics" —the concept that programming and scripting runtimes should provide minimum transparency to aid prevention of bad behavior. Similar actions are being taken by Microsoft to make PowerShell more transparent to security tools.
Click to expand...

Log in or Sign up

Python May Let Security Tools See What Operations the Runtime Is Performing

guest Guest

Log in or Sign up

Python May Let Security Tools See What Operations the Runtime Is Performing

guest Guest

Useful Searches