Secure coding in C: Recognizing and preventing vulnerabilities
Duration: 2 days
Participants: up to 12 people
Location: virtual or in person
Cost: on request
This practice-oriented training teaches how secure coding in C helps avoid software vulnerabilities and effectively protect systems against attacks. Using concrete examples as a basis, participants will learn how security vulnerabilities arise, how attackers exploit them, and what methods, guidelines and tools can help prevent them. The course is led by experienced senior cyber security experts who are actively involved in projects in the fields of medical technology, the automotive sector and industry.
After completing the course, participants will be familiar with the typical vectors used to attack software, and be able to identify vulnerabilities that are critical with respect to security. They will be familiar with established secure coding guidelines such as the CWE, as well as static and dynamic analysis methods and key defense techniques for robust C code.
Training content:
Introduction to secure coding: Risks, threat models and the attacker’s perspective
Typical software vulnerabilities in C and their exploitation
Secure coding practices
Secure handling of sensitive data in functions
Secure coding guidelines (e.g. CWE)
Methods: Static and dynamic code analysis, exploit mitigation techniques
Tools and best practices for secure development in C
Practical section: Analyzing examples of code, applying defense techniques
The content of the training can be tailored to your project-specific requirements and questions.
Target audience
This course is intended for developers who would like to develop software in C securely. The content is also suitable for coders who use other languages like C++, since many of the principles are transferable.
Prerequisites
Good knowledge of how to develop and compile using C code, and basic knowledge of software engineering processes are required.
Further information
We offer this training as a customized training course. There are currently no fixed dates for individual registrations. We would be happy to provide you with a customized offer for your company.
Share
Contact us with any questions or for an individual quote.