“Internet-of-things devices are widely deployed, and suffer from easy-to-exploit security issues. … Because patch deployments tend to be focused on server-side vulnerabilities, client software in large codebases such as Apache may remain largely unpatched, and hence, vulnerable. … In this paper, we address this issue of leaving latent vulnerabilities in legacy codebases. We propose Solder, a framework to patch or retrofit legacy C/C++ code by replacing any target function with a newly-implemented one in a safe language such as Rust.”

Find the paper and full list of authors in the International Conference on Software Analysis, Evolution and Reengineering proceedings.