CPSC 7325 - Software Security Assessment

Three credit hours.

Today’s networked and complex software not only increases number of potential vulnerabilities but also increases risk associated with vulnerabilities. The industry-specific regulations further necessitate building software with the minimum number of vulnerabilities. This course delivers the know-how of dealing with software vulnerabilities. The topics covered include Software Vulnerability Fundamentals, Auditing and Black Box Testing, Design, Implementation, and Operational Vulnerabilities, Design and Operational Review, Attack Surface; Insecure Defaults; Access Control; Secure Channels, Application Review Process, Code-Auditing Strategies, Software Vulnerabilities, Assessing Memory Corruption, Synchronization and State, Vulnerabilities in Practice, Documentation of Findings.

Prerequisites: CPSC 5360 or Consent of Instructor.