FIT2173 · Software security

Overview

This unit aims to introduce secure software development issues from the design stage, through to the implementation, testing and deployment stages. Topics covered in this unit include the secure software development life cycle, secure software design principles, threat evaluation models, secure coding and development practices, software security testing, deployment and maintenance. You are provided with a range of practical exercises and tasks to reinforce your skills including: identification of security bugs in programs written in different programming languages, design, implementation, and testing of secure concurrent and networked applications and identification of vulnerabilities in networked and mobile/wireless applications.

Areas of study: Applied cybersecurity Cybersecurity

Offerings

Assessment

The Handbook does not list a final examination among the assessment items. That is not a guarantee there is none.

100% in-semester

Assessment details may change. Please refer to the assessment information in Moodle closer to the start of the teaching period.

Requisites

Learning outcomes

1. Understand the fundamentals of software security.
2. Model the possible software vulnerabilities and threats for a given application system
3. Apply a wide range of tools and technologies to evaluate software vulnerabilities.
4. Apply appropriate methods for the design and realisation of secure software for memory exploits and web applications security.
5. Analyse and evaluate security properties of concurrent and networked applications.
6. Discuss and evaluate the significance of various software security weaknesses.
7. Describe and select mitigation strategies for common vulnerabilities and attacks.
8. Investigate, implement and exploit security vulnerabilities in a lab environment.

Workload

Minimum total expected workload to achieve the learning outcomes for this unit is 144 hours per semester typically comprising a mixture of scheduled online and face to face learning activities and independent study. Independent study may include associated reading and preparation for scheduled teaching activities. There will be around 2-hours per week asynchronous material, including videos, articles, etc., over 12 weeks - this will be created on Moodle.

Student experience, not official rules. Nothing here changes what the Handbook says.