Introduction to Secure Coding in C and C++

Both languages (C and C++) were designed to be general purpose, structured programming languages that suited systems and embedded programming.

C++ was designed from the start to be an object oriented language with support for encapsulation, data hiding, inheritance, and polymorphism.

Traditional attack vectors

1. Insecure memory handling
2. Race conditions
3. Insecure I/O handling
4. Information disclosure via exception…