M/W/F 2:00 - 2:50 LEEP2 G415
Software Security Evaluation (Research) is an upper-level course about extracting security-relevant information out of software, and writing secure software.
Note: Topics will be posted as they approach. The plan is to post topics on Friday for the coming week. Unless otherwise specified, you should submit a report on every discussion paper.
| Week | Date | Topic | Assignments | Notes | Videos |
|---|---|---|---|---|---|
| 1 | 08/26 | Course Overview | survey,E1 | mp4, pdf, pptx | |
| 08/28 | Abstracting Code | E2 | mp4, pdf, pptx | E2 | |
| 08/30 | LLVM Bitcode | P1,E3 | mp4, pdf, pptx | ||
| 2 | 09/02 | Labor Day | |||
| 09/04 | LLVM Memory | mp4, pdf, pptx | |||
| 09/06 | LLVM Calls | E4 | mp4, pdf, pptx | ||
| 3 | 09/09 | Malware | E5 | mp4, pdf, pptx | E5 |
| 09/11 | Memory Attacks | E6 | mp4, pdf, pptx | E6 | |
| 09/13 | QUIZ 1 | ||||
| 4 | 09/16 | Computability | E7 | mp4, pdf, pptx | E7 |
| 09/18 | Static Analysis | E8 | mp4, pdf, pptx | E8 | |
| 09/20 | Control Flow | E9 | mp4, pdf, pptx | E9 | |
| 5 | 09/23 | Fixpoints | E10 | mp4, pdf, pptx | E10 |
| 09/25 | Lattices | E11 | mp4, pdf, pptx | E11 | |
| 09/27 | Abstract Interpretation | P2,E12 | mp4, pdf, pptx | E12 | |
| 6 | 09/30 | Information Flow | R1,E13 | mp4, pdf, pptx | E13 |
| 10/02 | Side Channels | E14 | mp4, pdf, pptx | E14 | |
| 10/04 | Dependency Analysis | E15 | mp4, pdf, pptx | E15 | |
| 7 | 10/07 | Program Slicing | E16 | mp4, pdf, pptx | E16 |
| 10/09 | Interprocedural Analysis | E17 | mp4, pdf, pptx | E17 | |
| 10/11 | Summary Functions | E18 | mp4, pdf, pptx | E18 | |
| 8 | 10/14 | Fall Break | E18 | ||
| 10/16 | Class Hierarchy Analysis | E19 | mp4, pdf, pptx | E19 | |
| 10/18 | Points-To Analysis | E20 | mp4, pdf, pptx | E20 | |
| 9 | 10/21 | Program Instrumentation | E21 | mp4, pdf, pptx | E21 |
| 10/23 | Static Instrumentation | E22,R2 | mp4, pdf, pptx | E22 | |
| 10/25 | LLVM Instrumentation | E23 | mp4, pdf, pptx | E23 | |
| 10 | 10/28 | QUIZ 2 | mp4 | ||
| 10/30 | Reference Monitors | E24 | mp4, pdf, pptx | ||
| 11/01 | Control Flow Integrity | E25 | mp4, mp4, pdf, pptx | ||
| 11 | 11/04 | Dynamic Analysis | E26 | mp4, pdf, pptx | |
| 11/06 | Fuzzing | E27 | mp4, pdf, pptx | ||
| 11/08 | Symbolic Execution | ||||
| 12 | 11/11 | Concolic Execution | |||
| 11/13 | Sat Solving | ||||
| 11/15 | SMT Solving | ||||
| 13 | 11/18 | SSDLC | |||
| 11/20 | Linting | ||||
| 11/22 | QUIZ 3 | ||||
| 14 | 11/25 | Principles of Secure Engineering | |||
| 11/27 | Thanksgiving Break | ||||
| 11/29 | Thanksgiving Break | ||||
| 15 | 12/02 | Bug Isolation | |||
| 12/04 | Supply Chain Security | ||||
| 12/06 | Reverse Engineering | ||||
| 16 | 12/09 | Static Review | |||
| 12/11 | Dynamic Review | ||||
| 12/13 | Stop Day |