defdeveu courses
Search…
README
secdev courses
Java
JavaScript
Android
iOS
.NET
C/C++
Webapps in general
Testing courses
Mobile testing automation
Security test automation in CI/CD pipelines
Burp for developers
DevSecOps courses
Docker security
AWS security
Control courses
Security champions boot
Assisted code-review lab
Practical personal cybersec for security auditors
S-SDLC playbook
Library
Mobile security baseline
Hacking applications
Language specific
Java specific
.net/C# specific
JavaScript specific
C/C++ specific
Delivery
Main features
Agenda structure
Days and kits
Trainer formations
Course materials
Trainers
Glenn ten Cate
Zsombor Kovács
Davide Cioccia
Péter Nyilasy
Marek Zachara
Riccardo ten Cate
Timur Khrotko
Powered By GitBook
C/C++ specific
Work in progress

The language specific module

Secure coding in C/C++

Developed by Marek Zachara
    Major difference of C++ against other common technologies
    C/C++ related code vulnerabilities
      Buffer overflow
      Memory management and pointers
      String handling
      Integer overflow
      Multiple threads
      Privilege management
      Uninitialized variables
      execve()
    Library functions and returns
    How to write a secure code?
    Debugging tips & tricks
    A look from the future (Rust, golang)
    SEI CERT C++ Coding Standard
    Cryptography in C/C++

Prerequisites

We assume that the developers attending this course:
    are familiar with the C++ and with XOX;
    understand the HTTP protocol, HTML and Javascript;
    are familiar with basic security features of an enterprise application (authentication, authorization, the concept of a session);
    have XOX framework and a suitable IDE installed on their laptop (labs desktop).
Previous
JavaScript specific
Next - Delivery
Main features
Last modified 2yr ago
Copy link
Contents
The language specific module
Secure coding in C/C++
Prerequisites