M/W/F 2:00 - 2:50 LEEP2 G415
Software Security Evaluation (Research) is an upper-level course about extracting security-relevant information out of software, and writing secure software.
Note: Topics will be posted as they approach. The plan is to post topics on Friday for the coming week. Unless otherwise specified, you should submit a report on every discussion paper.
| Week | Date | Topic | Assignments | Notes | Videos |
|---|---|---|---|---|---|
| 1 | 08/18 | Course Overview | survey,E1 | mp4, pdf, pptx | |
| 08/20 | Abstracting Code | E2 | mp4, pdf, pptx | ||
| 08/22 | LLVM Bitcode | P1,E3 | mp4, pdf, pptx | ||
| 2 | 08/25 | LLVM Memory | E4 | mp4, pdf, pptx | |
| 08/27 | LLVM Calls | E5 | mp4, pdf, pptx | ||
| 08/29 | Computability | E6 | mp4, pdf, pptx | ||
| 3 | 09/01 | Labor Day | |||
| 09/03 | Static Analysis | P2,E7 | mp4, pdf, pptx | ||
| 09/05 | Control Flow | E8 | mp4, pdf, pptx | ||
| 4 | 09/08 | Fixpoints | E9 | mp4, pdf, pptx | |
| 09/10 | Lattices | E10 | mp4, pdf, pptx | ||
| 09/12 | Dataflow Frameworks | E11 | mp4, pdf, pptx | ||
| 5 | 09/15 | Malware | E12 | mp4, pdf, pptx | |
| 09/17 | Quiz 1 Review | mp4, pdf, pptx | |||
| 09/19 | QUIZ 1 | ||||
| 6 | 09/22 | Information Flow | R1,E13 | mp4, pdf, pptx | |
| 09/24 | Side Channels | E14 | mp4, pdf, pptx | ||
| 09/26 | Dependency Analysis | E15 | mp4, pdf, pptx | ||
| 7 | 09/29 | Program Slicing | E16 | mp4, pdf, pptx | |
| 10/01 | Interprocedural Analysis | E17 | mp4, pdf, pptx | ||
| 10/03 | Summary Functions | E18 | mp4, pdf, pptx | ||
| 8 | 10/06 | Class Hierarchy Analysis | E19 | pdf, pptx | |
| 10/08 | Points-To Analysis | E20 | mp4, pdf, pptx | ||
| 10/10 | Program Instrumentation | P3,E21 | |||
| 9 | 10/13 | Fall Break | |||
| 10/15 | Quiz 2 Review | E22,R2 | mp4, pdf, pptx | ||
| 10/17 | QUIZ 2 | E23 | |||
| 10 | 10/20 | Static Instrumentation | E24 | ||
| 10/22 | LLVM Instrumentation | E25 | |||
| 10/24 | Reference Monitors | E26 | mp4, pdf, pptx | ||
| 11 | 10/27 | Control Flow Integrity | |||
| 10/29 | Dynamic Analysis | ||||
| 10/31 | Fuzzing | ||||
| 12 | 11/03 | Symbolic Execution | |||
| 11/05 | Concolic Execution | ||||
| 11/07 | Sat Solving | ||||
| 13 | 11/10 | SMT Solving | |||
| 11/12 | SSDLC | ||||
| 11/14 | Quiz 3 Review | ||||
| 14 | 11/17 | QUIZ 3 | |||
| 11/19 | Linting | ||||
| 11/21 | Secure Design | ||||
| 15 | 11/24 | Bug Isolation | |||
| 11/26 | Thanksgiving Break | ||||
| 11/28 | Thanksgiving Break | ||||
| 16 | 12/01 | Supply Chain Security | |||
| 12/03 | Reverse Engineering | ||||
| 12/05 | Stop Day |