Safe programming

Description

The subject provides students with the application of security principles in the process of software development and the formation of theoretical knowledge and practical skills in safe coding. within the scope of the subject, the reasons for the emergence of security vulnerabilities caused by the primary code, exploitation methods and their prevention mechanisms are studied. students examine `buffer overflow', `format string', SQL injection, xss, and other typical software vulnerabilities, as well as SEI CERT secure coding standards. basic principles of secure authentication and session management, proper use of cryptographic apis, and code auditing are reviewed. application of security requirements throughout the entire life cycle of software from development to operation, as well as static (sast) and dynamic (dast) analysis methods are studied. the course is aimed at building students' skills in building a laboratory environment, investigating OWASP top 10 vulnerabilities, analyzing code from the point of view of security, and eliminating discovered vulnerabilities.

Course learning outcomes

1. 1

   CLO 1: Understands what software security is and why it happens.

2. 2

   CLO 2: It understands the structure of the computer's memory, memory overflow, and how the exploits that occur because of this work.

3. 3

   CLO 3: Knows how to consider security aspects when building software architecture, principles of their prevention.

4. 4

   CLO 4: Software code auditing is able to use tools for automated dynamic and static code testing.

5. 5

   CLO 5: Knows the importance of security issues and the principles of its monitoring throughout the entire life cycle of software development.

6. 6

   CLO 6: Able to perform secure code auditing. the most common software in the world is aware of security holes.