FIT5003 · Software security

Overview

This unit aims to introduce the secure software development issues including secure software development life cycle, secure software design principles, secure coding practices, threat evaluation models, secure software testing, deployment and maintenance, software development and security policy integration. You are provided with a range of practical exercises and tasks to reinforce their skills including: identification of security bugs in programs written in different programming languages, design, implementation, and testing of secure concurrent and networked applications, identification of vulnerabilities in networked and mobile/wireless applications. In addition, you will learn input validation techniques to minimise security risks, man-in-the-middle attack techniques to be able to build more secure networked applications, practical secure software testing techniques to be able to test applications for security bugs.

Areas of study: Networks and security

Offerings

Assessment

The Handbook does not list a final examination among the assessment items. That is not a guarantee there is none.

Assessment details may change. Please refer to the assessment information in Moodle closer to the start of the teaching period.

Requisites

Learning outcomes

1. Investigate methods that are appropriate for the realisation software security;
2. Investigate and model the possible vulnerabilities and threats for a given application system;
3. Design, implement and produce test procedures and perform evaluation of software security features of concurrent and networked applications.
4. Analyse and evaluate software security related scenarios with reference to the code of ethics and professional practice.

Workload

Minimum total expected workload to achieve the learning outcomes for this unit is 144 hours per semester typically comprising a mixture of scheduled online and face to face learning activities and independent study. Independent study may include associated reading and preparation for scheduled teaching activities.

Student experience, not official rules. Nothing here changes what the Handbook says.