M/W/F 1:00 - 1:50 LEEP2 2425
Software Security Evaluation (Research) is an upper-level course about extracting security-relevant information out of software, and writing secure software.
Note: Topics will be posted as they approach. The plan is to post topics on Friday for the coming week. Unless otherwise specified, you should submit a report on every discussion paper.
| Week | Date | Topic | Assignments | Notes |
|---|---|---|---|---|
| 1 | 08/21 | Course Overview | E1,read syllabus,submit survey | pptx |
| 08/23 | Computability | E2 | pdf, pptx | |
| 08/25 | Dynamic Analysis | E3 | pdf, pptx | |
| 2 | 08/28 | Static Analysis | E4 | pdf, pptx |
| 08/30 | Control Flow | E5 | pdf, pptx | |
| 09/01 | Data Flow | E6 | pdf, pptx | |
| 3 | 09/04 | Labor Day | ||
| 09/06 | Lattices | E7 | pdf, pptx | |
| 09/08 | Abstract Interpretation | E8 | pdf, pptx | |
| 4 | 09/11 | Bitcode | E9,W1 | pdf, pptx |
| 09/13 | QUIZ 1 | |||
| 09/15 | No lecture (watch video instead) | |||
| 5 | 09/18 | LLVM Memory | E10 | pdf, pptx |
| 09/20 | LLVM Calls | E11 | pdf, pptx | |
| 09/22 | Information Flow | E12 | pdf, pptx | |
| 6 | 09/25 | Practical Flow | E13,W2 | pdf, pptx |
| 09/27 | Side Channels | E14 | pdf, pptx | |
| 09/29 | Reference Monitors | E15 | pdf, pptx | |
| 7 | 10/02 | Memory Attacks | E16,W3 | pdf, pptx |
| 10/04 | Control Flow Integrity | E17 | pdf, pptx | |
| 10/06 | Call Graphs | E18 | pdf, pptx | |
| 8 | 10/09 | Interprocedural Analysis | E19 | pdf, pptx |
| 10/11 | Points-To Analysis | E20 | pdf, pptx | |
| 10/13 | Dependency Analysis | E21 | pdf, pptx | |
| 9 | 10/16 | Fall Break | ||
| 10/18 | Program Slicing | E22 | pdf, pptx | |
| 10/20 | SSDLC | E23 | pdf, pptx | |
| 10 | 10/23 | Linting | E24 | pdf, pptx |
| 10/25 | Retrospective Review | |||
| 10/27 | QUIZ 2 | |||
| 11 | 10/30 | Program Instrumentation | E25,W4 | pdf, pptx |
| 11/01 | Static Instrumentation | E26 | pdf, pptx | |
| 11/03 | LLVM Instrumentation | E27 | pdf, pptx | |
| 12 | 11/06 | Fuzzing | E28 | pdf, pptx |
| 11/08 | Symbolic Execution | E29 | pdf, pptx | |
| 11/10 | Concolic Execution | E30 | pdf, pptx | |
| 13 | 11/13 | Sat Solving | E31 | pdf, pptx |
| 11/15 | SMT Solving | E32 | pdf, pptx | |
| 11/17 | QUIZ 3 | |||
| 14 | 11/20 | Secure Design | E33 | pdf, pptx |
| 11/22 | Thanksgiving Break | |||
| 11/24 | Thanksgiving Break | |||
| 15 | 11/27 | Bug Isolation | E34,c1 | pdf, pptx |
| 11/29 | Supply Chain Security | E35 | pdf, pptx | |
| 12/01 | Reverse Engineering | E36 | pdf, pptx | |
| 16 | 12/04 | Static Review | ||
| 12/06 | Dynamic Review | |||
| 12/08 | Stop Day |