"In attempts to mitigate the dangers of memory unsafe code in C and C++,
many software manufacturers invest in training programs for their developers. Many of
these training programs include tactics designed to reduce the prevalence of memory
unsafe vulnerabilities produced by those languages. Additionally, there are numerous
commercial and industry trade association training programs. Further, various organizations
and universities offer trainings and a professional certificate for demonstrating knowledge of
secure coding practices in C and C++.
While training can reduce the number of vulnerabilities a coder might introduce, given how
pervasive memory safety defects are, it is almost inevitable that memory safety
vulnerabilities will still occur. Even the most experienced developers write bugs that can
introduce significant vulnerabilities. Training should be a bridge while an organization
implements more robust technical controls, such as memory safe languages."