C and C++: A Security Perspective Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by DesignMax Hoffmann Security Beyond Memory Safety CppCon 2024 2 Security Beyond Memory Safety Hoffmann Security Beyond Memory Safety CppCon 2024 3 FIFTY SHADES OF SHOOTING YOURSELF IN THE FOOT WITH A RAILGUNMax Hoffmann Security Beyond Memory Safety CppCon 2024 4Max Hoffmann Security Beyond yearsMax Hoffmann Security Beyond Memory Safety CppCon 2024 6Max Hoffmann Security Beyond Memory Safety CppCon 2024 7Max Hoffmann Security Beyond Memory Safety CppCon 2024 8Max Hoffmann Security Beyond Memory

Embracing an Adversarial Mindset for C++ Security Amanda Rousseau 9/18/2024 This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY1 Strategies for Secure C++ DevelopmentWHOAMI 0x401006 Microsoft 0x40100C Offensive 0x40100F Research & Security 0x401018 Engineering 0x40101A (MORSE) CURRENT 0x401000 MALWARE UNICORN AMANDA ROUSSEAU 0x402001 perspectiveFactors Influencing Trends Increased Security Awareness and Practices Adoption of Modern Technologies •secure coding, regular patching, comprehensive security testing •Improved Discovery Methods -

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. Bintray provides free Conan repositories for OSS projects, so there is no need to open a Pro or Enterprise Trial account. 2. Create a Conan repository If you intend to collaborate with other users, you

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. Bintray provides free Conan repositories for OSS projects, so there is no need to open a Pro or Enterprise Trial account. 2. Create a Conan repository If you intend to collaborate with other users, you

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. Bintray provides free Conan repositories for OSS projects, so there is no need to open a Pro or Enterprise Trial account. 2. Create a Conan repository If you intend to collaborate with other users, you

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. Bintray provides free Conan repositories for OSS projects, so there is no need to open a Pro or Enterprise Trial account. 2. Create a Conan repository If you intend to collaborate with other users, you

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. it is necessary that the LD_LIBRARY_PATH and DYLD_LIBRARY_PATH environment variables are used. Security restrictions might apply in OSX (read this thread), so the DYLD_LIBRARY_PATH and DYLD_FRAMEWORK_PATH

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. Bintray provides free Conan repositories for OSS projects, so there is no need to open a Pro or Enterprise Trial account. 2. Create a Conan repository If you intend to collaborate with other users, you

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. Bintray provides free Conan repositories for OSS projects, so there is no need to open a Pro or Enterprise Trial account. 2. Create a Conan repository If you intend to collaborate with other users, you

Description: A toolkit for the Transport Layer Security (TLS) and Secure Sockets␣ ˓→Layer (SSL) protocols Topics: conan, openssl, ssl, tls, encryption, security Recipe: Cache Binary: Cache Binary remote: binary repository manager for all major packaging formats. It is the recom- mended remote type for enterprise and professional package management. Check the Artifactory documentation for more information. it is necessary that the LD_LIBRARY_PATH and DYLD_LIBRARY_PATH environment variables are used. Security restrictions might apply in OSX (read this thread), so the DYLD_LIBRARY_PATH and DYLD_FRAMEWORK_PATH