The phenomenal rise in technology, and especially, software-driven products (domains like networking, telecom, embedded-automotive, infotainment, and especially now IoT, ML, AI) literally begs for better security on end-products. Hackers currently have a field day! and are only getting better at it, while product developers lag behind. Not a good thing. This presentation is geared towards helping participants understand why and where software vulnerabilities exist, while programming and after; available OS Hardening techniques; what tools and methodologies help prevent and mitigate security issues. The training essentially consists of 3 parts: – Part 1: Security/Hacking Intro – Part 2 : Technical: deep dive into software vulnerabilities, their root causes, process stack – Part 3 : Technical: Modern OS Hardening Countermeasures (esp on Linux). Details: areas it covers includes: Part 1 – Terminology – Current State of Security. Part 2 – Tech Prelim: the process stack – BoF (Buffer Overflow) Vulnerabilities – Demo of a BoF on an ARM VM. Part 3 – Modern OS Hardening Countermeasures – state of Linux OS in particular.

