Bringing Safety and Security to Python
Mingshen Sun

Security

We build a security-enhanced Python implementation based on PyPy mainly focuses on improving its security and memory safety. We achieve the memory-safety promise through various methods: hardening RPython's type system, rewriting PyPy/RPython's libraries, and verifying the RPython's libraries as well as its translator/JIT backend. On top of the enhancements, we also bring Python into Intel SGX to write memory-safe applications running in the trusted execution environment.