Everything you need to earn your certification
- 1-Year access to all boot camp video replays and materials
- 100% Satisfaction Guarantee
- Free annual Infosec Skills subscription ($299 value!)
- Hands-on cyber ranges and labs
- Knowledge Transfer Guarantee
What you'll learn
Training overview
Our Secure Coding in C/C++ Boot Camp covers typical C/C++ security programming bugs and common vulnerabilities. The root causes of the problems are explained through a number of easy-to-understand source code examples that depict how to find and correct the issues. The real strength of the training is the numerous hands-on exercises, which help you understand how easy it is for attackers to exploit these vulnerabilities.
The training also provides an overview of practical protection methods that can be applied at different levels (hardware components, operating systems, programming languages, the compiler, the source code or in production) to prevent the occurrence of various bugs, to detect them during development and before market launch, or to prevent their exploitation during system operation. Through exercises specially tailored to these mitigation techniques, you’ll learn how simple it is to eliminate various security problems.
Before your boot camp
Prerequisites
- Knowledge of C / C++ programming languages
- Familiarity with memory management
- Background in OS mechanisms
-
Day 1
-
IT security and secure coding
- Nature of security
- IT security-related terms
- Definition of risk
- IT security vs. secure coding
- From vulnerabilities to botnets and cybercrime
- Classification of security flaws
Security relevant C/C++ programming bugs and flaws
- Exploitable security flaws
- Protection principles
- x86 machine code, memory layout, stack operations
Buffer overflow
- Stack overflow
- Heap overflow
-
-
Day 2
-
Common coding errors and vulnerabilities
- Input validation
- Improper error and exception handling
- Time and state problems
- Code quality problems
Advice and principles
- Matt Bishop’s principles of robust programming
- The security principles of Saltzer and Schroeder
Knowledge sources
- Vulnerability databases
- Secure coding sources – a starter kit
-
Syllabus
Syllabus
Training schedule
Guaranteed results
Our boot camp guarantees
100% Satisfaction Guarantee
If you’re not 100% satisfied with your training at the end of the first day, you may withdraw and enroll in a different online or in-person course.
Knowledge Transfer Guarantee
If an employee leaves within three months of obtaining certification, Infosec will train a different employee at the same organization tuition-free for up to one year.
Unlock team training discounts
If you’re like many of our clients, employee certification is more than a goal — it’s a business requirement. Connect with our team to learn more about our training discounts.
