Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of Secure C and C++ Development
- Exploring core principles of secure software engineering
- Identifying prevalent security risks in C and C++ ecosystems
- Analyzing the link between programming errors and security flaws
- Reviewing established secure coding standards and best practices
Prevalent C and C++ Programming Vulnerabilities
- Recognizing coding errors that introduce security risks
- Examining memory safety concerns specific to C and C++
- Evaluating common vulnerability patterns and their potential impact
- Analyzing examples of insecure code implementations
Core Secure Programming Principles
- Implementing defense-in-depth strategies
- Writing robust and easily maintainable code
- Minimizing the potential attack surface
- Applying secure design principles to C and C++ applications
Input Validation and Data Management
- Understanding the critical role of input validation
- Preventing the exploitation of malicious input
- Implementing effective data sanitization methods
- Ensuring secure handling of user and external data streams
Error Handling and Exception Control
- Assessing risks posed by improper error management
- Designing secure error and exception handling mechanisms
- Preventing information leakage through error messages
- Building resilient and fault-tolerant applications
Memory Safety and Buffer Overflow Mitigation
- Understanding vulnerabilities in memory management
- Addressing stack-based buffer overflows
- Addressing heap-based buffer overflows
- Techniques for detecting and preventing memory corruption
- Implementing safe memory handling practices
Stack Protection and Runtime Security Enhancements
- Analyzing stack overflow vulnerabilities
- Leveraging compiler-based security protections
- Utilizing stack canaries and related protection mechanisms
- Implementing Address Space Layout Randomization (ASLR)
- Incorporating modern operating system security features
Advanced C++ Security Considerations
- Managing secure object lifecycles
- Preventing use-after-free vulnerabilities
- Safely managing pointers and references
- Eliminating type confusion issues
- Secure utilization of specific C++ language features
Secure Coding Toolsets and Methodologies
- Employing static analysis tools to detect vulnerabilities
- Applying code review techniques for security assessment
- Utilizing automated security testing approaches
- Integrating security checks into standard development workflows
Industry Standards and Best Practices for Secure Coding
- Reviewing industry-specific secure coding guidelines
- Applying defensive programming techniques consistently
- Embedding security into the entire software development lifecycle
- Maintaining secure and reliable C/C++ applications
Practical Secure Coding Workshop
- Analyzing vulnerable C/C++ code samples
- Implementing security fixes and code improvements
- Testing code resilience against common vulnerabilities
- Course conclusion and recommendations for secure development
Requirements
Fundamental knowledge of C/C++
21 Hours
Testimonials (6)
Experience sharing, it's teacher's know-how and valuable.
Carey Fan - Logitech
Course - C/C++ Secure Coding
the balance between lectures and practice, the rhythm, the trainer knowledge and pedagogic skill
Armando Pinto - EID
Course - C/C++ Secure Coding
The trainer provided up-to-date information and valuable references and tools.
Jose Vicente - EID
Course - C/C++ Secure Coding
to get a lot of good info about the course subject
Paulo Pereira - EID
Course - C/C++ Secure Coding
The coach solid knowledge and the experience, nice slides, good examples.
Celso Almeida - EID
Course - C/C++ Secure Coding
General course information
