Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Introduction to Secure C and C++ Development
- Core principles of secure software engineering
- Typical security threats in C and C++ environments
- Linking programming defects to security weaknesses
- Industry standards and best practices for secure coding
Prevalent C and C++ Security Vulnerabilities
- Recognizing coding errors that create security risks
- Addressing memory safety concerns in C and C++
- Evaluating vulnerability patterns and their consequences
- Examining examples of insecure code
Foundations of Secure Programming
- Implementing defense-in-depth strategies
- Creating robust and maintainable codebases
- Reducing the attack surface area
- Applying secure design methodologies to C and C++ systems
Input Validation and Data Processing
- The critical role of input validation in security
- Blocking exploitation of malicious inputs
- Techniques for data sanitization
- Secure management of user-generated and external data
Error Handling and Exception Management
- Dangers posed by inadequate error handling
- Architecting secure error and exception routines
- Preventing data leakage via error messages
- Building application resilience
Memory Integrity and Buffer Overflow Defense
- Comprehending memory management flaws
- Stack-based buffer overflow mechanics
- Heap-based buffer overflow mechanics
- Identifying and stopping memory corruption
- Best practices for safe memory operations
Stack Defense and Runtime Security Mechanisms
- Understanding stack overflow risks
- Security features provided by compilers
- Implementation of stack canaries and protection logic
- Address Space Layout Randomization (ASLR)
- Contemporary operating system security capabilities
Advanced C++ Security Perspectives
- Managing object lifecycles securely
- Mitigating use-after-free errors
- Safe management of pointers and references
- Preventing type confusion incidents
- Secure utilization of C++ language features
Secure Coding Toolsets and Methodologies
- Utilizing static analysis to uncover vulnerabilities
- Conducting security-focused code reviews
- Approaches to automated security testing
- Incorporating security checks into development pipelines
Secure Coding Standards and Operational Best Practices
- Evaluating industry secure coding guidelines
- Employing defensive programming tactics
- Embedding security within the software development lifecycle
- Sustaining secure and reliable C/C++ applications
Hands-On Secure Coding Workshop
- Analyzing vulnerable C/C++ code samples
- Implementing security patches and enhancements
- Validating code against common attack vectors
- Course summary and recommendations for secure development
Requirements
Fundamentals of C/C++
21 Hours
Testimonials (6)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the balance between lectures and practice, the rhythm, the trainer knowledge and pedagogic skill
Armando Pinto - EID
Course - C/C++ Secure Coding
The trainer provided up-to-date information and valuable references and tools.
Jose Vicente - EID
Course - C/C++ Secure Coding
to get a lot of good info about the course subject
Paulo Pereira - EID
Course - C/C++ Secure Coding
The coach solid knowledge and the experience, nice slides, good examples.
Celso Almeida - EID
Course - C/C++ Secure Coding
General course information
