• Online, Self-Paced
Course Description

In this course, you will learn how to identify and mitigate CWE-131: Testing for Incorrect Calculation of Buffer Size. Coverage includes techniques for spotting CWE-131 vulnerabilities through code review and testing. Secure coding best practices are included, as well as descriptions of technology and platform-specific weaknesses as appropriate. This course requires basic knowledge of client-server applications, web applications, the Software Development Life Cycle, cryptography, and the STRIDE model. Upon completion of this course, you will be able to identify CWE-131 vulnerabilities, recognize its potential impact, apply coding best practices to avoid it, find CWE-131 vulnerabilities in your application’s source code, and test your application to detect it.

Learning Objectives

On successful completion of this course, learners should have the knowledge and skills to:

  • Identify Incorrect Calculation of Buffer Size vulnerabilities
  • Recognize the potential impact of this vulnerability
  • Apply coding best practices to avoid it
  • Find Incorrect Calculation of Buffer Size vulnerabilities in your application’s source code
  • Test your application to detect it

Framework Connections

The materials within this course focus on the Knowledge Skills and Abilities (KSAs) identified within the Specialty Areas listed below. Click to view Specialty Area details within the interactive National Cybersecurity Workforce Framework.