CIS 4615: Secure Software Development and Assurance

The course covers software security, terms, and definitions, including threat modeling, secure software development lifecycle and touchpoints, risk management frameworks, and their incorporation into the secure software development lifecycle, common criteria and why they are needed, common bad software development practices and how to avoid them, and instances of bad practices that would result in actual threats due to buffer overflow, dangling pointers, memory leakage, etc. As applications areas, the course will also cover software security for the web, networks, and cryptographic tools, associated attack vectors, and the corresponding secure software development practices associated with them.

Offered: Fall 2018, Fall 2017.