Lecture Topics

Please see our Canvas page for the course to download lectures mentioned below.

• Software security concepts
• Taxonomies for vulnerabilities
• Software security lifecycle and security components
• Vulnerability prediction modeling
• Vulnerability discovery modeling
• Iterative software security assessment process
• Threat modeling
• Static analysis of source code
• Overview of software forward and reverse engineering
• Overview of binary files, visualization, and manipulation
• x86-64 architecture
• Linux operating system and shellcode
• Input validation and uninitialized variables
• Stack memory safety
• Heap memory safety
• Format string vulnerability, exploit, and defenses
• Integer safety
• Defenses in depth
• Binary disassembly and decompilation
• System analysis, program analysis, debugging
• Fuzzing
• Symbolic execution
• Return oriented programming
• Advanced case studies