Start Date: December 2, 3, 4 & 5, 2024

Time: 4 PM CET - 8 PM CET (4 hours each day)

Total Duration: 16 hours

Prerequisite: None

Course Outline:

Module 1: Introduction to SEI CERT Coding Standards

• Lesson 1

- Overview of Software Engineering Institute (SEI) and CERT

- Importance of secure coding standards

- Common security vulnerabilities in software development

- Introduction to SEI CERT coding standards and their purpose 

Module 2: SEI CERT C Coding Standard 

• Lesson 2

- Introduction to the CERT C coding standard

- Key principles and guidelines in CERT C 

• Lesson 3 

- Common vulnerabilities in C and how CERT C mitigates them

- Detailed study of specific CERT C rules and recommendations: 

* Rule EXP00-C: Do not use invalid pointers

* Rule STR31-C: Guarantee that storage for strings has sufficient space for character data and the null terminator

* Rule MSC32-C: Properly seed pseudo-random number generators 

• Lesson 4

- Hands-on exercises:

* Identifying and fixing vulnerabilities in sample C code

* Applying CERT C guidelines to improve code security  

Module 3: SEI CERT C++ Coding Standard 

• Lesson 5

- Introduction to the CERT C++ coding standard

- Key principles and guidelines in CERT C++ 

• Lesson 6

- Common vulnerabilities in C++ and how CERT C++ mitigates them

- Detailed study of specific CERT C++ rules and recommendations: 

* Rule DCL50-CPP: Do not define a C-style variadic function

* Rule EXP61-CPP: A lambda object must not outlive any of its reference captured objects

* Rule CTR50-CPP: Guarantee that container indices and iterators are within the valid range 

• Lesson 7

- Hands-on exercises:

* Identifying and fixing vulnerabilities in sample C++ code

* Applying CERT C++ guidelines to improve code security