Security Aspects in Software Development (WS11/12)

Content

In this course, different aspects and topics in the area of secure software development are discussed. The topics include security evaluations during the design phase as well as security related implementation faults during the development phase (e.g. buffer-overflows). Student should be able to estimate the security threats and security risk of certain software projects. Moreover, the students should be able to address certain threats with adequate countermeasures.

• Guidelines for software security
• Detection and avoidance of implementation faults
• Application and overview of cryptographic techniques
• Security evaluations
• Virus, Worms and Trojans

The course consists of a lecture (VO) and a practical exercise (KU).

Exams

There are at least three exams per term. The common duration of an exam is about one hour where the candidates have to answer five questions. Examples for past exams can be found at the "OeH Pruefungsbeispielsammlung".

Microsoft Academic Alliance Software

For access to our Microsoft Academic alliance Software, you are required to complete task 0 of the practicals positively.

Lecture Notes

Thanks to the collaborate effort of some of your colleagues who attended the lecture in previous years a draft version of lecture notes ("Skriptum") is available here.

News

All course relevant news are listed in the following table. You are encouraged to check the news section on a regular basis:

Date	Title
27.9.2011	The practicals page has been updated for winter term 2011/2012.

---

---