ITI8610
Course code: ITI8610
Lecturer: prof. Jüri Vain
Contact: juri.vain ätt ttu.ee, ICT-418
Co-lecturer: Maili Markvardt
Co-lecturer: Aleksandr Lenin
Time and place
Lectures: Mondays 14:00, ICT-A1
Labs: Fidays 10:00, ICT-501
- Lab supervisors:
- Maili Markvardt(maili.markvardt ätt ttu.ee) - Module I
- Aleksandr Lenin (aleksandr.lenin ätt ttu.ee) - Module II
- Jishu Guin (jishu.guin ätt ttu.ee) - Module III
News 2015
Lecture plan
- Lecture 1: Introduction to software assurance
Module I: Assurance processes & risk management
TBA
Module II: Security Assurance
Lecture 1: Security Risk Management
Lecture 2: Security Risk Management (contd.)
Lecture 3: Security Best Practices
Lecture 4: Input Validation
Lecture 5. Web Application Security. Cross-Site Scripting Attacks
Practice Assignments
Module I
- Lab 1:
Module II: Security Assurance
Assignment 1: Risk Analysis using the FAIR (Factor Analysis of Information Security Risk) framework
Assignment 2: Vulnerability Identification in Code using Static Analysis Tools
Assignment 3: Architectural Risk Analysis
Assignment 4: Web Application Exploitation
Module III
NB! To report completed lab assignments go to web page https://ained.ttu.ee
and register as user with uniID of TUT
Exercises
Resources
https://ained.ttu.ee -- õppekesskkonas olevad materjalid Gary McGraw "Software Security. Building Security In"