程式安全

Secure Programming

學期

112-1

學分

3 學分

當期課號

535510

永久課號

CSIC30085

開課單位

資訊科學與工程研究所

授課教師

黃俊穎

校區

光復

類別

選修

上課時間表

節	週五
2 09:00–09:50	程式安全 EC324 3 節連堂
3 10:10–11:00
4 11:10–12:00

* 根據陽明交大上課時間表所列

概述

We will introduce how software quality and programming practices related issues will influence the overall system security. The students can learn the principles of writing secure code, practice several analysis techniques and writing exploit for assuring software security. 我們將介紹軟體品質與程式寫作議題,探討與整體系統安全的相關性。學生將以練習程式安全相關攻擊技術為主,撰寫與開發軟體安全脅迫程式。 Please visit instructor's course site and participate the pre-test if you plan to sign up this course. The website is at: https://people.cs.nctu.edu.tw/~chuang/courses/swsec/ 想加選這門課的同學,請訪問老師的課程網站,並按指示參加課程活動: https://people.cs.nctu.edu.tw/~chuang/courses/swsec/

先修科目

Programming Languages, Assembly, C/C++, and Python programming languages are required. Unix System and Scripting (python, ruby...) experiences are recommended. 程式語言與組合語言為必備能力。最好有Unix 系統與 Script 語言經驗。

教學方式

課堂教學將與台大、台科大課程網路同步教學,並輔以課堂實際操作、進行資安攻防演練。開學前將有修課資格測驗,原則上必須通過此測驗,我們才建議修此課程。

評分方式

** Final exam: 25% On-site bug analysis and exploit development. We will have the joint final exam with NTU/NTUST related courses lasting two days in CTF style of challenges. ** Online CTF of Secure Coding: 65% ** Misc. 10% Attending CTF competitions is encouraged

課程大綱

Fundamental Topics
Advanced Topics
Programming Environments

週次計畫

週次	主題
第 1 週	Outline and overview
第 2 週	Introduction
第 3 週	Basic Tools &amp Concept
第 4 週	Web+Reverse I
第 5 週	Web+Reverse II
第 6 週	Web+Reverse III
第 7 週	Crypto + MISC
第 8 週	Crypto + MISC
第 9 週	Crypto + MISC
第 10 週	Midterm Exam
第 11 週	Symbolic Execution + Fuzz Testing
第 12 週	Symbolic Execution + Fuzz Testing
第 13 週	Symbolic Execution + Fuzz Testing
第 14 週	Symbolic Execution + Fuzz Testing
第 15 週	Binary Exploits
第 16 週	Binary Exploits
第 17 週	Binary Exploits
第 18 週	Final CTF

教科書

參考書目: 1. Brian Chess and Jacob West, “Secure Programming with Static Analysis”, Addison Wesley Professional , 2007, ISBN-10: 0-321-42477-8. 2. Robert C. Seacord, “Secure Coding in C and C++”, 2006 Pearson Education, Inc. 3. Michael Howard and Davide LeBlanc, “Writing Secure Code”, 2006 Microsoft Press. 4. Mark G. Graff and Kenneth R. van Wyk, “Secure Coding Principles and Practices”, 2003 O’Reilly and Associates, Inc

Office Hours

地點: EC417
時間: 5EF
聯絡方式: chuang@cs.nctu.edu.tw