Exploiting Modern C++

by Butler, Matthew

• ISBN13: 9780136502074
• ISBN10: 0136502075
• Edition: 1st
• Format: Paperback
• Copyright: 2020-10-26
• Publisher: Addison-Wesley Professional

Summary

Exploiting Modern C++ will help C++ software engineers understand how hackers seek to exploit their code, how they craft their exploits, what they look for in penetrating a system, and how to design and write code that’s far more resistant to attack. Leading C++ developer and secure coding expert Matthew Butler helps developers transform the way they view their code. Butler shows how to

• Recognize the differences between ordinary bugs and serious vulnerabilities
• Understand patterns of vulnerability in source code, architecture, and your own thinking
• Choose and apply the right tools for identifying specific flaws
• Detect problems via code reviews, static and dynamic testing, fuzz testing, and penetration Improve system design by performing advanced threat hunting with a hacker’s mindset
• Master 10 proven best practices for hardening any C++ code base

Practical from start to finish, Exploiting Modern C++ goes beyond conventional wisdom and static testing to help you strengthen security at all phases of development, from design through remediation. You’ll learn through practical code examples, as well as two extensive case studies.

Author Biography

Matthew Butler has spent 30 years architecting and engineering software systems for network security, law enforcement and the military. He works primarily in signals intelligence, where he uses C, C++ and Modern C++ to build systems running on hardware platforms ranging from embedded micro-controllers to FPGAs to large-scale airborne platforms. Much of his experience has involved building systems that defend against attackers or building highly sensitive systems that are targets. He is actively involved in the C++ community, serves on various planning committees for C++Now and CppCon, and speaks at both events.

Table of Contents

I. Prologue

II. Flying the Unfriendly Skies

III. Running with Scissors

IV. The Art of War

V. Threat Hunting

VI. Epilogue

A. Stupid Hacker Tricks

B. Side Channel Attacks