|
Language of Instruction
|
English
|
|
Level of Course Unit
|
Bachelor's Degree
|
|
Department / Program
|
COMPUTER ENGINEERING
|
|
Type of Program
|
Formal Education
|
|
Type of Course Unit
|
Elective
|
|
Course Delivery Method
|
Face To Face
|
|
Objectives of the Course
|
To teach general security flaws seen in programs and secure programming approaches.
|
|
Course Content
|
Basic program security principles, Shell and operating system based threats, Overflow attacks, Input attacks, Web security, Security frameworks, Code analysis and code security tests
|
|
Course Methods and Techniques
|
Lecture, Discussion, Question and Answer, Problem Solving, Experiment
|
|
Prerequisites and co-requisities
|
( BBM104 ) and ( BBM102 ) and ( BBM459 )
|
|
Course Coordinator
|
None
|
|
Name of Lecturers
|
Prof. Dr. Suat Özdemir
|
|
Assistants
|
None
|
|
Work Placement(s)
|
No
|
Recommended or Required Reading
|
Resources
|
1. Counter Hack Reloaded:A Step-by-Step Guide to Computer Attacks and Effective Defenses, Edward Skoudis, Tom Liston, Prentice Hall
2. Hacking Exposed 7: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray, George Kurtz, McGraw-Hill Osborne Media
3. Secure Coding: Principles and Practices, Mark G. Graff, Kenneth R. Van Wyk, O'Reilly Media
4. Software Security: Building Security, Gary McGraw, Addison-Wesley
5. Writing Secure Code: Practical Strategies and Proven Techniques for Building Secure Applications in a Networked World, Michael Howard, David LeBlanc, 2nd ed. Edition, Microsoft Press
6. Foundations of Security: What Every Programmer Needs To Know, Neil Daswani, Christoph Kern, and Anita Kesavan
7. Security in Computing. C. P. Pfleeger and S. L. Pfleeger, Prentice Hall
|
|
Course Notes
|
“Writing Secure Code: Practical Strategies and Proven Techniques for Building Secure Applications in a Networked World”, Michael Howard, David LeBlanc, 2nd ed. Edition, Microsoft Press
“Secure Coding: Principles and Practices”, Mark G. Graff, Kenneth R. Van Wyk, O'Reilly Media
“Software Security: Building Security”, Gary McGraw, Addison-Wesley
“Secure Programming Cookbook for C and C++: Recipes for Cryptography, Authentication, Input Validation”, John Viega, Matt Messier, O'Reilly Media
“Secure Coding in C and C++”, Robert C. Seacord, Addison-Wesley Professional
|
|