Training in secure coding

Introduction to LDRA training in secure coding

Connectivity has brought seismic change to embedded applications, with new opportunities for easier monitoring, upgrading, and enhancement. On the downside, connected systems present many more attack surfaces that are vulnerable to bad actors. Defending against such attacks is a daunting task.

No single defense of a connected system can guarantee impenetrability; however, applying multiple levels of security ensures that if one level fails, others stand guard. Examples of such defence-in-depth approaches can include a mix of:

• Secure boot, which ensures the correct image loads
• Domain separation
• Multiple independent levels of security (MILS) design principles, such as least privilege
• Attack surface reduction
• Techniques for secure coding
• Security-focused testing such as static and dynamic analysis

Our secure coding training courses are crafted to equip software professionals with the knowledge and skills to effectively understand how secure code contributes to the security of a system, the secure coding techniques that are available and, given limited resources, where secure coding techniques are best prioritised. Whether you’re a beginner or seeking to enhance your expertise, our training provides practical insights and expert guidance to help you confidently implement secure coding best practices in your projects.

Key benefits

• Defense-in-depth: Understand the principles of defense-in-depth and how secure coding contributes.
• Secure Software Development Life Cycle: Understand the Secure Software Development Life Cycle (SSDLC), which integrates security practices into each phase of the software development process.
• Standards Compliance: Discover the importance of coding standards such as MISRA Guidelines in promoting secure coding practices.
• CERT and CWE: Understand the guidelines and rules promoted by CWE and CERT, and how they contribute to secure code.
• Risk Mitigation: Learn about proactive approaches and testing techniques designed to identify and mitigate vulnerabilities in your code.
• Up-to-Date Knowledge: Stay current with best practices, ensuring your skills remain relevant.
• Open or closed courses: Attend an open course with attendees from other companies or request a closed course for your organization.

Courses

Can’t find the right date or course? We can help.

Use this form to: 

• Be notified when the next date is set for an existing course.
• Suggest a new course you’d like us to run.
• Enquire about custom training tailored to your needs.

Additional resources

→ The MISRA Language Guidelines, MISRA C:2023, and MISRA C++:2023

Frequently asked questions

Q: What is LDRA’s expertise in secure coding?

A: The thread that runs through all LDRA tool, service, and consultancy offerings is the firm belief that well-written software is safer, more secure, and more reliable.

An example of LDRA’s commitment to secure coding lies in its commitment to the MISRA organization and its stated stated aim of “providing best practice guidelines for the safe and secure application of both embedded control systems and standalone software.”

Q: Do the courses require knowledge of the LDRA tool suite?

A: Absolutely not! Our secure coding training courses focus on secure coding best practice and do not feature the use of LDRA tools.

Q: Can the training be customised to our organisation’s specific needs?

A: Yes, we offer customised courses that can be tailored to your organisation’s specific requirements, whether that involves focusing on particular secure coding best practices or your project-specific needs.