SDT 311 – Testing for Integer Overflow or Wraparound

Course Overview

An integer overflow or wraparound may often be intended behavior; however, it can also introduce other weaknesses and security consequences. This course introduces ways to identify and mitigate this security weakness, referenced as CWE-190 by the CWE Top 25.

Topics include:

• Recognizing the impact of this vulnerability
• Techniques for finding Integer Overflow issues through code review
• Application of secure coding best practices to prevent these attacks
• Testing to detect Integer Overflow or Wraparound