Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of Secure C and C++ Development
- Principles of secure software engineering
- Prevalent security risks within C and C++ environments
- Correlation between coding errors and security breaches
- Industry-standard secure coding practices
Identifying Common C and C++ Vulnerabilities
- Recognizing coding errors that introduce security flaws
- Memory safety concerns specific to C and C++
- Analysis of vulnerability patterns and their consequences
- Examining insecure code samples
Core Secure Programming Principles
- Implementation of defense-in-depth strategies
- Writing code that is both robust and maintainable
- Reducing the attack surface
- Applying secure design methodologies to C and C++ projects
Input Validation and Data Processing
- The critical role of input validation
- Strategies to prevent exploitation of malicious inputs
- Techniques for data sanitization
- Secure management of user and external data sources
Error Handling and Exception Management
- Security risks stemming from inadequate error handling
- Architecting secure error and exception mechanisms
- Preventing information disclosure via error messages
- Building fault-tolerant applications
Memory Safety and Buffer Overflow Mitigation
- Analyzing memory management weaknesses
- Stack-based buffer overflow scenarios
- Heap-based buffer overflow scenarios
- Identification and prevention of memory corruption
- Best practices for safe memory manipulation
Stack Protections and Runtime Security Enhancements
- Understanding stack overflow risks
- Security protections offered by compilers
- Stack canaries and related protective mechanisms
- Address Space Layout Randomization (ASLR)
- Leveraging modern operating system security features
Advanced C++ Security Considerations
- Managing secure object lifecycles
- Mitigating use-after-free vulnerabilities
- Safe management of pointers and references
- Preventing type confusion issues
- Secure utilization of advanced C++ features
Secure Coding Toolkits and Methodologies
- Utilizing static analysis tools for vulnerability detection
- Security-focused code review techniques
- Approaches to automated security testing
- Embedding security checks into development workflows
Secure Coding Standards and Industry Best Practices
- Evaluating industry-wide secure coding guidelines
- Implementing defensive programming tactics
- Integrating security throughout the software development lifecycle
- Sustaining secure and reliable C/C++ applications
Practical Secure Coding Workshop
- Analysis of vulnerable C/C++ code snippets
- Application of security patches and optimizations
- Testing code against common vulnerability vectors
- Course recap and recommendations for secure development
Requirements
Foundational knowledge of C/C++
21 Hours
Testimonials (6)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the balance between lectures and practice, the rhythm, the trainer knowledge and pedagogic skill
Armando Pinto - EID
Course - C/C++ Secure Coding
The trainer provided up-to-date information and valuable references and tools.
Jose Vicente - EID
Course - C/C++ Secure Coding
to get a lot of good info about the course subject
Paulo Pereira - EID
Course - C/C++ Secure Coding
The coach solid knowledge and the experience, nice slides, good examples.
Celso Almeida - EID
Course - C/C++ Secure Coding
General course information
