程式安全

Secure Programming

學期

106-1

學分

3 學分

當期課號

5940

永久課號

IOC5087

開課單位

資訊科學與工程研究所

授課教師

黃俊穎

校區

光復

類別

選修

上課時間表

節	週五
2 09:00–09:50	程式安全 CS105 3 節連堂
3 10:10–11:00
4 11:10–12:00

* 根據陽明交大上課時間表所列

概述

We will introduce how software quality and programming practices related issues will influence the overall system security. The students can learn the principles of writing secure code, practice several analysis techniques and writing exploit for assuring software security. 我們將介紹軟體品質與程式寫作議題,探討與整體系統安全的相關性。學生將以練習程式安全相關攻擊技術為主,撰寫與開發軟體安全脅迫程式。

先修科目

Assembly, C and C++ programming languages are required. Unix scripting (python, ruby...) experiences are recommended. 程式語言與組合語言為必備能力。最好有Unix 系統與 Script 語言經驗。

評分方式

Final exam: 25% On-site bug analysis and exploit development.  We will have the joint final exam with NTU/NTUST related courses lasting two days in CTF style of challenges.  Online CTF of Secure Coding: 65%  Misc. 10% Attending CTF competitions is encouraged

週次計畫

週次	主題
第 1 週	Course Administrative Announcement
第 2 週	Basic Tools & Concept
第 3 週	Assembly & Basic Knowledge
第 4 週	Linux Binary Exploitation - BOF
第 5 週	Linux Binary Exploitation - FMT/ROP
第 6 週	Linux Binary Exploitation - Heap
第 7 週	TBD
第 8 週	TBD
第 9 週	Midterm - No Class
第 10 週	Invited Talk: Speakers from Synology
第 11 週	Linux Binary Exploitation - Advanced
第 12 週	Symbolic Execution - Part I
第 13 週	Symbolic Execution - Part II
第 14 週	Windows Reverse - Part I
第 15 週	Windows Reverse - Part II
第 16 週	TBD
第 17 週	Windows Exploitation
第 18 週	Final CTF

教科書

參考書目: 1. Brian Chess and Jacob West, “Secure Programming with Static Analysis”, Addison Wesley Professional, 2007, ISBN-10: 0-321- 42477-8. 2. Robert C. Seacord, “Secure Coding in C and C++”, 2006 Pearson Education, Inc. 3. Michael Howard and Davide LeBlanc, “Writing Secure Code”, 2006 Microsoft Press. 4. Mark G. Graff and Kenneth R. van Wyk, “Secure Coding Principles and Practices”, 2003 O’Reilly and Associates, Inc

Office Hours

地點: EC417
時間: Wed 10-12am (tentative)
聯絡方式: Email: chuang@cs.nctu.edu.tw