Secure programming

Description

The course is divided in the following modules: A. Introduction to security and basic terminology B. Secure programming Designing secure programs Conservative programming Testing for security C. Cryptography Desired properties Symmetric and asymmetric cryptography Public key infrastructure Simple attacks against cryptography D. Systems security Memory error vulnerabilities How to exploit vulnerable programs Common defenses against memory errors Web security Course Objective: This is an introductory course on computer security. The emphasis will be on how to develop applications with security in mind. At the end of the course, students should be able to demonstrate Knowledge and Understanding (K&U), Applying Knowledge and Understanding (AK&U), and Making Judgements (MJ) for these topics: Basic concepts in computer security (K&U, AK&U) How common vulnerabilities can be exploited to undermine application security and web security. (K&U, AK&U, MJ) How proper design, implementation, and testing can make software more secure (K&U, AK&U, MJ) How cryptography can be applied to make software more secure (K&U, AK&U, MJ) How automated tools can be used to make software more secure (K&U, AK&U, MJ) The acronyms above refer to the Dublin Descriptors covered by each learning objective, specifically: Knowledge and Understanding (K&U), Applied Knowledge and Understanding (AK&U), Making Judgment (MJ), Learning Skills (LS), and Communication (C). Assessment Information: The final grade is computed based on a written exam (50%) and the weighted average of practical assignments (50%). There are two assignments, one group assignment (weight 30%) and an individual assignment (weight 20%). To pass the course, the exam grade must be at least 5.5 and the final grade must be at least 5.5. Please note that your grade will be registered as follows: For the first exam date: if you did not submit any assignments and did not participate in the exam, the result will be registered as no show (NS). For the second exam date: if you did not participate in the resit exam, the result will be registered as no show (NS). In all other cases, you will receive either a numeric grade or incomplete (NVD). If you did not meet the minimum grade requirements for the assignments and/or the exam, but your weighted average is >= 5.5, your grade is NVD. Otherwise, your final grade is your weighted average, rounded to half points except for 5.5. If you plan to drop the course, do not submit anything, as NVD is administratively considered a failing grade. There is no resit opportunity for the practical assignments. Results for practical assignments and for the exam may be transferred from previous years if their contents did not change significantly since the result was obtained (as determined by the examiner). If you submit an assignment or participate in the exam, the new result replaces any transferred results.