C and C++: A Security Perspective Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by DesignMax Hoffmann Security Beyond Memory Safety CppCon 2024 2 Security Beyond Memory Safety Hoffmann Security Beyond Memory Safety CppCon 2024 3 FIFTY SHADES OF SHOOTING YOURSELF IN THE FOOT WITH A RAILGUNMax Hoffmann Security Beyond Memory Safety CppCon 2024 4Max Hoffmann Security Beyond yearsMax Hoffmann Security Beyond Memory Safety CppCon 2024 6Max Hoffmann Security Beyond Memory Safety CppCon 2024 7Max Hoffmann Security Beyond Memory Safety CppCon 2024 8Max Hoffmann Security Beyond Memory

com © 2024 Bloomberg Finance L.P. All rights reserved. • Create a basic HTTP server. • Allow a single-threaded server handling multiple clients. • Use the sender/receiver asynchronous framework.

Embracing an Adversarial Mindset for C++ Security Amanda Rousseau 9/18/2024 This presentation is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY1 Strategies for Secure C++ DevelopmentWHOAMI 0x401006 Microsoft 0x40100C Offensive 0x40100F Research & Security 0x401018 Engineering 0x40101A (MORSE) CURRENT 0x401000 MALWARE UNICORN AMANDA ROUSSEAU 0x402001 •Advanced adversaries How: •Deserialization •Client-Server interfaces Denial of Service Who: •Hacktivists •Script Kiddies •Game hackers How: •Client-Server interfaces Medium Effort Med-High Effort High

Edition for C/C++ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 7.5 Running conan_server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 8 Developing Windows, Linux, OSX, FreeBSD, Solaris, and others, and it can target any platform, including desktop, server, and cross-building for embedded and bare metal devices. It integrates with other tools like Docker Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds of popular open source libraries packages,

Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 Code Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 practical example based on the main requirements of using regular expressions. Exercise In web server development, we usually want to serve some routes that satisfy a certain condition. Regular expressions std::unordered_map< std::string,std::function>> resource_type; And server template: template class ServerBase { public: resource_type resource;

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 8.4 Running conan_server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 9 Developing Windows, Linux, OSX, FreeBSD, Solaris, and others, and it can target any platform, including desktop, server, and cross-building for embedded and bare metal devices. It integrates with other tools like Docker Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds of popular open source libraries packages,

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 8.4 Running conan_server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 9 Developing Windows, Linux, OSX, FreeBSD, Solaris, and others, and it can target any platform, including desktop, server, and cross-building for embedded and bare metal devices. It integrates with other tools like Docker Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds of popular open source libraries packages,

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 8.4 Running conan_server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 9 Developing Windows, Linux, OSX, FreeBSD, Solaris, and others, and it can target any platform, including desktop, server, and cross-building for embedded and bare metal devices. It integrates with other tools like Docker Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds of popular open source libraries packages,

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 8.4 Running conan_server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 9 Developing Windows, Linux, OSX, FreeBSD, Solaris, and others, and it can target any platform, including desktop, server, and cross-building for embedded and bare metal devices. It integrates with other tools like Docker Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds of popular open source libraries packages,

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 8.4 Running conan_server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 9 Developing Windows, Linux, OSX, FreeBSD, Solaris, and others, and it can target any platform, including desktop, server, and cross-building for embedded and bare metal devices. It integrates with other tools like Docker Community Edition for Conan, enabling developers to host their own private packages on their own server. The ConanCenter central repository contains hundreds of popular open source libraries packages,