You will learn how to write conforming C++ in a constructive way, instead of reacting to compliancy checker warnings. We will look at, for example,



vulnerabilities of built-in integral types and how to sidestep those.

using user-defined types to improve the design and decrease vulnerabilities of function interfaces.

acknowledging vulnerabilities of pointer-like types and how to reduce the need for them.

MISRA-compliant class design from Rule-of-Zero, Rule of DesDeMovA, Modern Rule-of-Three, to the Rule-of-Five/Six for General Manager types.

specific vulnerabilities of concurrent code and how upcoming MISRA C++ might address them.

MISRA-C++ guidelines intended to be deviated, so that such deviation is deliberate, thoughtful, and documented.



This is not a workshop addressing the most recent C++26 features, but cares for modern C++ in high quality and safety and security related setting. If you bring your own code examples and questions to discuss you can make the most out of this workshop and draw from Peter's four decades of experience as a developer and educator in providing developer guidance (First C++ guidelines published 1992), creating reliable software, and teaching software engineering.

2 Days

21-22 Sept

Safer C++ with MISRA-C++:2023 and beyond

Security

This course concentrates on security issues intrinsic to the C and C++ programming languages and associated libraries. You will learn to identify vulnerabilities ensuing from common security flaws including:

This course covers specific remediation techniques for each category of security flaws as well as general secure coding practices that help prevent the introduction of vulnerabilities.

Material in this presentation was derived from the Addison-Wesley books Secure Coding in C and C++ and The CERT C Secure Coding Standard.



Exercise: Reviewing Code for Integer Defects

Day 2: Dangerous Optimizations & Dynamic Memory


Secure Coding in C and C++ is useful to anyone involved in the development or maintenance of software in C and C++. If you are a:


C or C++ programmer, this course will teach you how to identify common
programming errors that result in software vulnerabilities, understand
how these errors are exploited, and implement a solution in a secure
fashion.

Software project manager, this course identifies the risks and
consequences of software vulnerabilities to guide investments in
developing secure software.

Computer science student, this course will teach you programming
practices that will help you to avoid developing bad habits and enable
you to develop secure programs during your professional career.

Security analyst, this course provides a detailed description of common
vulnerabilities, identifies ways to detect these vulnerabilities, and
offers practical avoidance strategies.




The course assumes basic C and C++ programming skills, but does not assume an in depth knowledge of software security. The ideas presented apply to various development environments, but the examples are specific to Microsoft Visual Studio and Linux/GCC and the Intel Architecture.




Students are also encouraged to bring their own C and C++ programming language development environments (compiler, editor, etc.), such as Microsoft Visual Studio, Xcode, GCC, or Clang.

Secure Coding in C and C++

Programming Languages

We look at the pros and cons of various options to find the simpler, safer, more maintainable, and better performing options that exist.

Writing clean, safe, maintainable C++ that performs well by default by gaining a deeper understanding of the language

Using tools to help ensure that your C++ is as safe as possible


A working knowledge of C++. This class is valuable for all skill levels, but the absolute beginner will get less from the class.


Students will work on small exercises in groups. Students will need a laptop with a web browser that can access 

C++ Best Practices

Technique

Good Software Design -- the proper management of dependencies -- is the foundation for the success of a project. The basic building blocks for software design are design patterns. Design patterns have proven themselves invaluable over several decades and thus knowledge about them is essential to design robust, decoupled systems. Modern C++, however, has profoundly changed the way we use C++, how we think about design and implement solutions. This also affects how we implement design patterns.



This training class explores modern C++ software design and the modern forms of classic design patterns. It provides guidelines, idioms and best practices for sustainable and maintainable design, which enables programmers to create professional, high-quality code. Amongst others it will answer the following questions:


 How does good C++ design with a minimum of dependencies look like?

What are the most important rules for robust, maintainable, and sustainable design?

What are the most common pitfalls in C++ software design?

Why does classical C++ design based on inheritance hierarchies fail so often?

How are the classic design patterns implemented in modern C++?

What are alternatives to the classic design patterns?

After this course, participants will ...

... have a detailed understanding of the essential design principles;

... understand the benefits of separation of concerns;

... be able to design code with minimum dependencies;

... have an impression of the modern alternatives of classic design patterns;

... have gained knowledge about modern design techniques;

... understand how std::function, std::any, and ranges work;

... know about the importance of value semantics;

... comprehend the advantages of non-intrusive design.

Attendees will need to bring a laptop to this workshop. 
Either have a working C++20/23 environment on your machine (any OS, any IDE/editor and compiler work) or use an online compiler (

C++ Software Design

Along the way we will build up a comprehensive sample application, dive into real-world examples, and explore ongoing developments in recent Qt releases to improve abstractions, reduce boilerplate and bring peace, harmony and balance to your QML universe.

QML Architecture & Performance deep-dive

This workshop is hands-on and includes several coding exercises. Attendees are encouraged to pair and work on the labs. The workshop involves live-coding and is highly interactive. 

Influence of TDD on Agility and Sustainability

Software systems, design, complexity, and how to cope

The two benefits of TDD—rapid feedback and design influence

What’s really needed to be effective at TDD?

Types of Tests: White box and black box testing

Type of unit tests–positive, negative, and exception tests

Performance tests* What is really a unit of code?

Practices for Unit Testing* Tenets of Unit Testing

Detailed example of building a small App test driven

When to write unit tests?* When not to write unit tests?

Dos and Don’ts* Structuring tests for readability 

Common pitfalls programmers run into when using mocks

Using AI to Create Tests for Existing Code

Design Complexities and AI generated test quality


Software developers, programmers, leads, architects, technical managers who are keenly interested in sustainable agile development.


 Test Driven Development with C++

The workshop consists of small programs written in C. We'll port this code to Rust, first by a simple mapping from C to Rust. Once we have the code in Rust, we'll start re-factoring and re-expressing the code into clean and idiomatic Rust. The workshop will demonstrate how we can leverage the Rust's strong type system to create robust and beautiful code.

Linux, MacOS or Windows with latest Rust toolchain. Detailed instructions can be found 

NDC { TechTown }

Workshops

09:00 - 17:00 (UTC+02)

Test Driven Development with C++

Venkat Subramaniam

C++ Software Design

Klaus Iglberger

QML Architecture & Performance deep-dive

James Turner

Secure Coding in C and C++

Robert Seacord

Safer C++ with MISRA-C++:2023 and beyond

Peter Sommerlad

Rust for imperialists

Eivind Bergem

C++ Best Practices

Jason Turner