Software Assurance

Catalog description

This course covers defensive programming techniques, bounds analysis, error handling, advanced testing techniques, detailed code auditing, and software specification in a trusted assured environment. Extensive laboratory exercises are assigned. Typically offered Fall. Prerequisite(s): ITS 34000 FOR LEVEL UG WITH MIN. GRADE OF C OR CS 27500 FOR LEVEL UG WITH MIN. GRADE OF C Course Learning Outcomes 1. Code access security (Web same origin policy). 2. Define the goals of secure coding. 3. Give guidelines for authenticating and defining permissions to systems services and resources in software development. 4. Discuss “Best secure coding” practice topics: Buffer overflows (e.g., string, integer, memory), Web Security, Securing data and state, Securing software access control, Wrapper code, Unmanaged and unmaintained code, Validation of user input, error handling. 5. Perform a security audit and testing of the code of an existing system, identify problems that violate best security coding practices and make recommendations to fix each problem. 6. Discuss the role of secure algorithms in the problem-solving process. 7. Discuss debugging and software assurance strategies. 8. Identify the necessary properties of good algorithms (quality and security). View Class Schedule