DESCRIPTION OF ON-SITE COURSES

SEARCH-LAB Ltd. offers the following on-site secure coding trainings:

Secure C/C++ Programming (2 days)

The training gives an insight into the typical C/C++ security relevant programming bugs – common security vulnerabilities – like different types of Buffer Overflow problems, printf format string bug, unicode bug, integer problems and covert channel attacks. We also give practical exercises about the attacking techniques that exploit these vulnerabilities, and the specific protection measures that can be applied at the architecture level to prevent the occurrences of the bugs, detect them before market launch or prevent their exploitation.

Secure coding for .NET and ASP.NET (2 days)

The course gives an overview of both the various security solutions and tools and the most frequent and severe security flaws of the .NET platform. It deals with both language-specific issues and the problems stemming from the runtime environment. We also introduce the vulnerabilities relevant to the ASP.NET platform, along with the general web-related vulnerabilities. The course consists of a number of exercises through which attendees can easily understand and execute attacks and mitigation techniques.

Basic Java Security (2 days)

The course on one hand introduces the basic security solutions provided by the Java language and the Java Runtime Environment, tackling issues like the Java Security Architecture and the security services of the Java Standard Edition. On the other hand, it systematically presents the most frequent and severe programming flaws of the Java language and platform, dealing with both language-specific issues and the problems stemming from the runtime environment.

Advanced Java and Web Services Security (3 days)

The training targets experienced Java developers, on one hand by overviewing the security solutions provided by the Java language and the Java Runtime Environment, covering appropriate elements of both the Java Security Architecture and the different security-related services of the JEE, as well as the security solutions in connection with the web-based technologies. On the other hand the course provides a comprehensive introduction to Java and web specific security vulnerabilities by demonstrating attack techniques and introducing applicable protection methods.

Combined C/C++, Java and Web Services Security(4 days)

The training gives a comprehensive overview of the typical security relevant problems of the most commonly used software technologies, including C/C++, Java and web-based applications. Different flaws and the associated attack techniques are presented, while the focus is on the preventive measures against potential vulnerabilities during software development. Specific protection measures are explained that can be applied at the architectural level or during design and development, in order to avoid the occurrence of programming bugs, to detect them before market launch or to prevent their exploitation.

Symbian Platform Security (2 days)

The training gives practical advices on secure programming under the Symbian operating system, while providing detailed introduction to the solutions and services of the Symbian Platform Security architecture. This architecture offers system level protection against several attacking techniques borrowed from the PC world that today's smart phones need to face.