Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of Secure C and C++ Development
- Principles of secure software engineering
- Typical security risks in C and C++ environments
- How programming errors lead to security vulnerabilities
- Industry standards and best practices for secure coding
Common Vulnerabilities in C and C++
- Recognizing coding errors that introduce security risks
- Memory safety challenges in C and C++
- Impact of specific vulnerability patterns
- Analyzing examples of insecure code
Core Secure Programming Principles
- Implementing defense-in-depth strategies
- Writing code that is both robust and maintainable
- Reducing the attack surface
- Secure design methodologies for C and C++
Input Validation and Data Processing
- The critical role of input validation
- Preventing exploitation of malicious inputs
- Techniques for data sanitization
- Secure management of user and external data
Error Handling and Exception Management
- Risks posed by inadequate error handling
- Building secure error and exception mechanisms
- Preventing information leakage via error messages
- Developing resilient application architectures
Memory Safety and Buffer Overflow Defense
- Understanding memory management flaws
- Stack-based buffer overflow mechanics
- Heap-based buffer overflow mechanics
- Strategies to detect and prevent memory corruption
- Best practices for safe memory handling
Stack Protection and Runtime Security
- Mechanics of stack overflow vulnerabilities
- Security features provided by compilers
- Stack canaries and other protection mechanisms
- Address Space Layout Randomization (ASLR)
- Security features in modern operating systems
Advanced C++ Security Topics
- Secure management of object lifecycles
- Mitigating use-after-free vulnerabilities
- Safe handling of pointers and references
- Preventing type confusion issues
- Secure utilization of C++ language features
Tools and Techniques for Secure Coding
- Leveraging static analysis tools to find vulnerabilities
- Security-focused code review methodologies
- Approaches for automated security testing
- Integrating security checks into the development pipeline
Standards and Best Practices
- Reviewing industry-specific secure coding guidelines
- Implementing defensive programming techniques
- Embedding security throughout the software development lifecycle
- Maintaining secure and reliable C/C++ applications
Hands-On Secure Coding Workshop
- Analyzing vulnerable C/C++ code samples
- Applying security fixes and enhancements
- Testing code against common vulnerabilities
- Course summary and recommendations for secure development
Requirements
Fundamental knowledge of C/C++
21 Hours
Testimonials (6)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the balance between lectures and practice, the rhythm, the trainer knowledge and pedagogic skill
Armando Pinto - EID
Course - C/C++ Secure Coding
The trainer provided up-to-date information and valuable references and tools.
Jose Vicente - EID
Course - C/C++ Secure Coding
to get a lot of good info about the course subject
Paulo Pereira - EID
Course - C/C++ Secure Coding
The coach solid knowledge and the experience, nice slides, good examples.
Celso Almeida - EID
Course - C/C++ Secure Coding
General course information
