程式安全

We will introduce how software quality and programming practices related issues will influence the overall system security. The students can learn the principles of writing secure code, practice several analysis techniques and writing exploit for assuring software security. 我們將介紹軟體品質與程式寫作議題,探討與整體系統安全的相關性。學生將以練習程式安全相關攻擊技術為主,撰寫與開發軟體安全脅迫程式。 Please visit instructor's course site and participate the pre-test if you plan to sign up this course. The website is at: https://people.cs.nctu.edu.tw/~chuang/courses/swsec/ 想加選這門課的同學,請訪問老師的課程網站,並按指示參加課程活動: https://people.cs.nctu.edu.tw/~chuang/courses/swsec/

Programming Languages, Assembly, C and C++ programming languages are required. Unix System and Scripting (python, ruby...) experiences are recommended. 程式語言與組合語言為必備能力。最好有Unix 系統與 Script 語言經驗。

課堂教學將與台大、台科大課程網路同步教學,並輔以課堂實際操作、進行資安攻防演練。開學前將有修課資格測驗,原則上必須通過此測驗,我們才建議修此課程。

** Final exam: 25% On-site bug analysis and exploit development. We will have the joint final exam with NTU/NTUST related courses lasting two days in CTF style of challenges. ** Online CTF of Secure Coding: 65% ** Misc. 10% Attending CTF competitions is encouraged

參考書目: 1. Brian Chess and Jacob West, “Secure Programming with Static Analysis”, Addison Wesley Professional , 2007, ISBN-10: 0-321-42477-8. 2. Robert C. Seacord, “Secure Coding in C and C++”, 2006 Pearson Education, Inc. 3. Michael Howard and Davide LeBlanc, “Writing Secure Code”, 2006 Microsoft Press. 4. Mark G. Graff and Kenneth R. van Wyk, “Secure Coding Principles and Practices”, 2003 O’Reilly and Associates, Inc

地點

EC417

時間

5EF

聯絡方式

chuang@cs.nctu.edu.tw