M/W/F 2:00 - 2:50 LEEP2 G415
Software Security Evaluation (Research) is an upper-level course about extracting security-relevant information out of software, and writing secure software.
Note: Topics will be posted as they approach. The plan is to post topics on Friday for the coming week. Unless otherwise specified, you should submit a report on every discussion paper.
| Week | Date | Topic | Assignments | Notes |
|---|---|---|---|---|
| 1 | 08/26 | Course Overview | survey,E1 | mp4, pdf, pptx |
| 08/28 | Abstracting Code | E2 | mp4, pdf, pptx | |
| 08/30 | LLVM Bitcode | P1,E3 | mp4, pdf, pptx | |
| 2 | 09/02 | Labor Day | ||
| 09/04 | LLVM Memory | mp4, pdf, pptx | ||
| 09/06 | LLVM Calls | E4 | mp4, pdf, pptx | |
| 3 | 09/09 | Malware | E5 | mp4, pdf, pptx |
| 09/11 | Memory Attacks | E6 | mp4, pdf, pptx | |
| 09/13 | QUIZ 1 | |||
| 4 | 09/16 | Computability | E7 | mp4, pdf, pptx |
| 09/18 | Static Analysis | E8 | mp4, pdf, pptx | |
| 09/20 | Control Flow | E9 | mp4, pdf, pptx | |
| 5 | 09/23 | Fixpoints | E10 | mp4, pdf, pptx |
| 09/25 | Lattices | E11 | mp4, pdf, pptx | |
| 09/27 | Abstract Interpretation | P2,E12 | mp4, pdf, pptx | |
| 6 | 09/30 | Information Flow | R1,E13 | mp4, pdf, pptx |
| 10/02 | Side Channels | E14 | mp4, pdf, pptx | |
| 10/04 | Dependency Analysis | E15 | mp4, pptx | |
| 7 | 10/07 | Program Slicing | E16 | mp4, pdf, pptx |
| 10/09 | Interprocedural Analysis | E17 | mp4, pdf, pptx | |
| 10/11 | Summary Functions | E18 | mp4, pdf, pptx | |
| 8 | 10/14 | Fall Break | ||
| 10/16 | Class Hierarchy Analysis | |||
| 10/18 | Points-To Analysis | |||
| 9 | 10/21 | QUIZ 2 | ||
| 10/23 | Dynamic Analysis | |||
| 10/25 | Fuzzing | |||
| 10 | 10/28 | SSDLC | ||
| 10/30 | Linting | |||
| 11/01 | Control Flow Integrity | |||
| 11 | 11/04 | Program Instrumentation | ||
| 11/06 | Static Instrumentation | |||
| 11/08 | LLVM Instrumentation | |||
| 12 | 11/11 | Reference Monitors | ||
| 11/13 | Symbolic Execution | |||
| 11/15 | Concolic Execution | |||
| 13 | 11/18 | Sat Solving | ||
| 11/20 | SMT Solving | |||
| 11/22 | QUIZ 3 | |||
| 14 | 11/25 | Principles of Secure Engineering | ||
| 11/27 | Thanksgiving Break | |||
| 11/29 | Thanksgiving Break | |||
| 15 | 12/02 | Bug Isolation | ||
| 12/04 | Supply Chain Security | |||
| 12/06 | Reverse Engineering | |||
| 16 | 12/09 | Static Review | ||
| 12/11 | Dynamic Review | |||
| 12/13 | Stop Day |