HackerTube
HomeLongsLikedHistoryWatch laterCategoriesPlaylistsSettings

NVIDIA — Securing the Future of Safety and Security of Embedded Software (Captioned)

AdaCore1 HN recommender · recommended in 1 month, 2022-2026
YouTube
5K views · 5 years ago · talk · evergreen

An AdaCore webinar in which NVIDIA engineers explain why and how they adopted Ada and SPARK for security-critical firmware. It covers the business case and the engineering experience of the transition.

HN cites it in Rust-versus-C++ and Ada discussions as a real industrial case of choosing SPARK for safer embedded code.

Logic & formal methodsSecurity & hackingProgramming language design#ada#spark#nvidia#firmware#memorysafety#formalverification

7 comments from Hacker News

@cpeterso2026 · in “CUDA-oxide: Nvidia's official Rust to CUDA compiler”

Here's a recording of a 2020 presentation ("Securing the Future of Safety and Security of Embedded Software") from NVIDIA at the AdaCore conference: ▶ this video

CitesView on HN
@cpeterso2025 · in “Introduction to Ada: a project-based exploration with rosettas”

Here’s a related talk: “NVIDIA - Securing the Future of Safety and Security of Embedded Software” ▶ this video > NVIDIA is working with AdaCore to implement Ada and SPARK programming languages into certain firmware elements to reduce this potential error. In this webinar you will learn how the combination of NVIDIA hardware with Ada and SPARK delivers robustness and security, improving efficiency and safety in the development pipeline.

CitesView on HN
@adezxc2025 · in “Ada Continues to Climb in June Tiobe Index and PYPL”

There's this talk by AdaCore and a SWE@nVidia on how nVidia utilized Ada/Spark for Embedded software: ▶ this video

CitesView on HN
@kevlar7002022 · in “It's time to halt starting any new projects in C/C++”

Ada offers security and simplicity and is already part of GCC but also has llvm now. Linux kernel drivers have also been demonstrated. Perhaps it would be healthier for Rust to have competition? link link link Nvidia also chose Spark; a built in subset of Ada as being more cost effective for secure code than C++. ▶ this video Assembly is also supported by Ada and I found it far easier to add than with C even. C interface support is also excellent.

CitesView on HN
@kevlar7002022 · in “Is it time to retire C and C++ for Rust in new programs?”

Ada offers security and simplicity and is already part of GCC but also has llvm now. Linux kernel drivers have also been demonstrated. Perhaps it would be healthier for Rust to have competition? link link link Nvidia also chose Spark; a built in subset of Ada as being more cost effective for secure code than C++. ▶ this video Assembly is also supported by Ada and I found it far easier to add than with C even. C interface support is also excellent.

CitesView on HN
@kevlar7002022 · in “Is it time to retire C and C++ for Rust in new programs?”

Ada offers security and simplicity and is already part of GCC but also has llvm now. Linux kernel drivers have also been demonstrated. Perhaps it would be healthier for Rust to have competition? link link link Nvidia also chose Spark; a built in subset of Ada as being more cost effective for secure code than C++. ▶ this video Assembly is also supported by Ada and I found it far easier to add than with C even. C interface support is also excellent.

CitesView on HN
@tnballo2022 · in “High Assurance Rust: Developing Secure and Robust Software”

Author of the book here, thank you for your feedback! Though not an Ada expert, I have used the SPARK subset. And I’ve worked on security assessment of military systems with components written in Ada. Although we looked at binaries and not source code, because our assurance model did not consider the Ada compiler to be part of the chain of trust (so we test the artifact the CPU will execute). I really like Ada and hope to use more of it in the future! The HN community may be interested in this 1 hour presentation [1] on Nvidia's adoption of Ada, including why they chose it over Rust in 2019 (regulatory certification was one factor). There’s also a great academic paper [2] on the recent advances SPARK has made in heap memory verification, inspired in part by Rust’s type system. There are currently efforts underway to certify Rust for usage in safety critical systems via an alternate, certified toolchain (among other pieces of the puzzle). Two related initiatives are linked through in FAQ question #7 (which someone already shared). I’ll be sure to add the Ferrous Systems and AdaCore collaboration when I have a chance to batch together some updates. I, like many others, believe Rust is a technology that can deliver value in safety and mission critical verticals due to reduction in undefined behavior via principled static analysis (a type system for which there has been early success in formal verification of safety claims[3]). Looking forward to digging into Rust research tools

RecommendsView on HN
Going Native 2012 Keynote Stroustrup1:29:49

Going Native 2012 Keynote Stroustrup

savage309
33K views • 14 years ago
Rust: A Language for the Next 40 Years - Carol Nichols55:08

Rust: A Language for the Next 40 Years - Carol Nichols

ChariotSolutions
367K views • 7 years ago
Ada, Past Present and Future44:59

Ada, Past Present and Future

AdaCore
17K views • 15 years ago
Leslie Lamport: Thinking Above the Code59:50

Leslie Lamport: Thinking Above the Code

Microsoft Research
403K views • 12 years ago
28c3: The Science of Insecurity59:23

28c3: The Science of Insecurity

28c3
42K views • 14 years ago
"A (Not So Gentle) Introduction To Systems Programming In ATS" by Aditya Siram36:58

"A (Not So Gentle) Introduction To Systems Programming In ATS" by Aditya Siram

Strange Loop Conference
26K views • 9 years ago
Introducing a Memory-Safe Successor Language in Large C++ Code Bases - John McCall - CppNow 20231:22:21

Introducing a Memory-Safe Successor Language in Large C++ Code Bases - John McCall - CppNow 2023

CppNow
18K views • 3 years ago
C++ and Beyond 2012: Herb Sutter - atomic Weapons 2 of 21:32:33

C++ and Beyond 2012: Herb Sutter - atomic Weapons 2 of 2

alexsmail
29K views • 9 years ago
Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops1:02:52

Joanna Rutkowska: Towards (reasonably) trustworthy x86 laptops

media.ccc.de
27K views • 10 years ago
"Agility & Robustness: Clojure spec" by Stuart Halloway40:00

"Agility & Robustness: Clojure spec" by Stuart Halloway

Strange Loop Conference
25K views • 10 years ago
Microsoft is Getting Rusty: A Review of Successes and Challenges - Mark Russinovich34:41

Microsoft is Getting Rusty: A Review of Successes and Challenges - Mark Russinovich

Rust Nation UK
46K views • 1 year ago
2017 ACM PPoPP Keynote: It's Time for a New Old Language1:12:12

2017 ACM PPoPP Keynote: It's Time for a New Old Language

Guy Steele
7K views • 9 years ago
Casey Muratori | Smart-Pointers, RAII, ZII? Becoming an N+2 programmer30:12

Casey Muratori | Smart-Pointers, RAII, ZII? Becoming an N+2 programmer

xDahl
162K views • 2 years ago
Philip Wadler  - Propositions as Types (Lambda Days 2016)56:58

Philip Wadler - Propositions as Types (Lambda Days 2016)

Erlang Solutions
20K views • 10 years ago
Rust at speed — building a fast concurrent database52:54

Rust at speed — building a fast concurrent database

Jon Gjengset
225K views • 7 years ago
Can C++ be 10x Simpler & Safer?  - Herb Sutter - CppCon 20221:54:00

Can C++ be 10x Simpler & Safer? - Herb Sutter - CppCon 2022

CppCon
277K views • 3 years ago
The One-Decade Task: Putting std::atomic in CUDA. - Olivier Giroux - CppCon 20191:05:39

The One-Decade Task: Putting std::atomic in CUDA. - Olivier Giroux - CppCon 2019

CppCon
11K views • 7 years ago
"Making Impossible States Impossible" by Richard Feldman25:06

"Making Impossible States Impossible" by Richard Feldman

elm-conf
63K views • 10 years ago
Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google50:06

Protected KVM on Arm64: A Technical Deep Dive - Quentin Perret, Google

The Linux Foundation
6K views • 4 years ago
Co-dfns Live Stream: Compiler Design and Architecture2:03:12

Co-dfns Live Stream: Compiler Design and Architecture

Aaron Hsu (arcfide)
21K views • 9 years ago