|University: Technical University of Košice|
|Faculty: Faculty of Electrical Engineering and Informatics|
|Department: Department of Computers and Informatics
|Course Number: 26001201||Course Name: Software security|
|Type, scope and method of learning activities:
Course Type: Lecture, Laboratory exercise
Recommended scope of the course content (in hours):
Full-time study (hours per week): 2,2
Part-time study (hours per semester): 26,26
Study Method: Attendance
|Number of credits: 6|
|Recommended semester of study: WT|
|Recommended semester||Study programme||Study grade||Study Method|
|2.rok WT||Cybersecurity (KB_Ing_D_sk)
|Level of study:|
|Course completion requirements:
Assessment and completion of the course: Credit test and examination
Continuous assessment: Student passes the continuous assessment and receives credits when he or she meets the requirement to obtain at least 21% out of 40%.
Final assessment: Student passes the final assessment and passes the examination when he or she meets the requirement to obtain at least 31% out of 60%.
Overall assessment: Overall assessment is the sum of the assessments obtained by students in the assessment period. The overall result is determined in accordance with the internal regulations of the Technical University in Košice. (Study Regulations, the internal regulation principles of doctoral studies)
The subject aims to become familiar with the principles and practices of secure programming. Secure programming means creating secure software without vulnerabilities that attackers could exploit. The result is the application of security features of libraries such as authentication, encryption, and others.
|Brief course content:
1. Principles of safe programming
2. Defensive programming
3. Input control, data validation
4. Tank overflow
5. Race gambling
6. Static, dynamic analysis
7. Security of sensitive data
8. Selection of programming language
10. SDLC and Security
|Recommended Reference Sources:
1. J. Viega and G. McGraw. Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley, 2001.
2. M. Howard and D. LeBlanc. Writing Secure Code. Microsoft Press, second edition, 2003.
3. David Basin, Patrick Schaller, Michael Schlapfer. Applied Information Security: A Hands-on Approach. Springer, 2011.
4. Fred Long et al. The Oracle/CERT Secure Coding Standard for Java, Addison-Wesley, 2011. Available online at http://www.cert.org/secure-coding/.
5. B. Chess and J. West. Secure Programming with Static Analysis. Addison-Wesley, 2007.
6. The OWASP web application security project: https://www.owasp.org/.
|Recommended optional program components:
|Languages required for the course completion:|
Total number of students assessed: 0
doc. Ing. Martin Chovanec, PhD.
doc. Ing. Branislav Madoš, PhD.
|Last modified: 01.09.2022|
|Approved by: person(s) responsible for the study program|