COS 317 Software Security Engineering

This course introduces sound security principles for incorporation into the software development process. Software security engineering includes properties of secure software, requirements analysis, design, implementation, testing, maintenance, and management. Common exploits are studied to uncover fundamental security flaws in many applications, to include security analysis techniques, buffer overruns, access controls, race conditions, input validation, network software security, testing, and software protection/anti-tamper technologies. Detailed explanations of common programming errors that lead to system exploitation are also covered. This course requires a student laptop - see Department Laptop Policy. Prerequisite(s): COS 230 or the permission of the instructor. 4 hour(s).