It is time to abandon C and C++.

It is difficult to write reliable and secure code
in C and C++. Instead, any new projects should be performed
in type safe programming languages such as Java, C#,
Cyclone and CCured. While those languages do not eliminate
security problems, they eliminate broad categories of them.
Strong consideration should be given to trying to migrate
security critical components of existing C
and C++ applications to a type safe language.