Embracing an Adversarial Mindset for C++ Security Amanda Rousseau 9/18/2024 This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY1 cross-org issues to combat a whole bug class 15% ● Writing tools to help with discovery 4%Adversarial Mindset Not taught in traditional institutionsThinking Like an Adversary Challenging assumptions Creatively libraries: • clang_rt.fuzzer_no_main-x86_64.lib • libsancov.libImportance of a security-focused mindset Considering security from the start of a project Threat modeling at the design stage Know the

complicated... Choose the smallest amount of work that you can write a test for "Engineering" mindset "Hacking" mindset Courtesy of Phil Nash 82TDD is difficult... Takes dedicated practice Requires a new

together Instant evaluation Grow furtherTransformation Resistance low with others Contagious Mindset Each others’ support Let’s try it out!Quality Ownership Knowledge Evolution Transformations

also affect compiler optimizations! 65 skewed profiling is still useful, but requires a different mindset Gotchas Beware excessive instrumentation!• just wait a little bit more (host application may not

92Programming with a value-based language • In a reference-based language like C# or Java, the mindset is different • One gets indirect access by default for class instances • Objects are zeroed by

Models Outlook Summary Abstract Conceptually: std::simd types express data-parallelism. Wrong mindset: std::simd types are specific SIMD registers. Which is why I prefer to call them “data-parallel

 Work outward to the scope of f.  Look in the namespace scope(s).  That is, look for nin the namespace scope(s) enclosing f.  Start in the namespace immediately enclosing f.  Work outward to the swap(name, other.name); swap(idnum, other.idnum); };  In other words, the compiler:  searches outward for declarations for swapfrom the point of the call, and  allows argument-dependent lookup (ADL)

there’s no matching decl in N, unqualified name lookup won’t find the friend and keeps looking outward, finding the typedef. � (ADL would find the friend, but isn’t triggered because f doesn’t name