Secure coding in C: Recognizing and preventing vulnerabilities

This practice-oriented training teaches how secure coding in C helps avoid software vulnerabilities and effectively protect systems against attacks. Using concrete examples as a basis, participants will learn how security vulnerabilities arise, how attackers exploit them, and what methods, guidelines and tools can help prevent them. The course is led by experienced senior cyber security experts who are actively involved in projects in the fields of medical technology, the automotive sector and industry.
Objectives and training content
After completing the course, participants will be familiar with the typical vectors used to attack software, and be able to identify vulnerabilities that are critical with respect to security. They will be familiar with established secure coding guidelines such as the CWE, as well as static and dynamic analysis methods and key defense techniques for robust C code.
Training content:
- Introduction to secure coding: Risks, threat models and the attacker’s perspective
- Typical software vulnerabilities in C and their exploitation
- Secure coding practices
- Secure handling of sensitive data in functions
- Secure coding guidelines (e.g. CWE)
- Methods: Static and dynamic code analysis, exploit mitigation techniques
- Tools and best practices for secure development in C
- Practical section: Analyzing examples of code, applying defense techniques
The content of the training can be tailored to your project-specific requirements and questions.
Target audience
Prerequisites
Further information
Kontakt
Sabine Haegele
Trainings


