Secure Software Development & Analysis

Catalog description

This is a pivotal course designed to impart a comprehensive understanding of security principles in the software development lifecycle. This course aims to provide a deep understanding of secure programming practices, software assurance, and software security analysis. Students will explore the system life-cycle phases, addressing security at each stage, and delve into the intricacies of vulnerability management, threat modeling, and software assurance maturity. The course emphasizes secure programming, including robust and defensive coding practices, to prevent vulnerabilities like buffer overflows and integer errors. Additionally, students will learn about various software security analysis tools and techniques, including source and binary code analysis, static and dynamic analysis, and testing methodologies. By integrating theory with practical application, the course prepares students to develop secure software that maintains confidentiality, integrity, and availability, and to analyze existing software for security vulnerabilities. Prerequisite(s): C YBR 108 or I CSI 201.