Secure C++ Programming
summary
Survey of concrete C++ fixes and tools: demonstrates an app that crashes a VM when run with 400 unbounded threads, explains integer wrap/truncation bugs and cites 89% preventable breaches, and shows two live fixes — range-checked typed properties for thread counts and an RAII OpenSSL wrapper replacing C-style context leaks. Recommends compilers and flags (GCC/Clang/VS, -fsanitize, ASLR), libraries (safe numerics, Boost, protobuf) and crypto patterns (AES-GCM with HMAC+protobuf) plus CI, static analysis and fuzzing to catch real faults.
AI-written summary · about
chapters (16)
- 0:00Start
- 0:29Who Am I
- 5:08The Target Breach
- 6:42Secure Coding
- 7:54Interfacing Openssl
- 8:19Sei Cert Coding Standards
- 9:53Integers
- 11:41Conversions Issues
- 16:44Basic Property
- 19:59Programmers Toolbox
- 22:44Secure Programming Processes
- 24:37C + + Coding Standards
- 24:59Code Review System
- 26:04Continuous Integration
- 26:37Penetration Testing
- 31:36Candidate Structure
related talks
50mSecure development with C++ - Lessons and techniques
51mSecure Programming Practices in C++
23mSecure Code, Safe Future: Mastering Security in Critical Software Development
01h 06mSecurity Beyond Memory Safety - Using Modern C++ to Avoid Vulnerabilities by Design
01h 01mSoftware Security
14mEmbedded C and C++: A Security Perspective
01h 26mVulnerable C++
43mC++ and Security: Can We Do Better?