EvilZone

Other => Found it on the Webs => Topic started by: Kiuhnm on October 17, 2014, 12:30:42 PM

Title: Software Security (Coursera)
Post by: Kiuhnm on October 17, 2014, 12:30:42 PM

Coursera offers a free course called Software Security which is about to start (20 Oct):
https://www.coursera.org/course/softwaresec (https://www.coursera.org/course/softwaresec)

Course Syllabus

In addition to a brief introductory sequence, the course is broken into six units, one per week:

• Low-level, memory-based attacks, including stack smashing, format string attacks, stale memory access attacks, and return-oriented Programming (ROP)
• Defenses against memory-based attacks, including stack canaries, non-executable data (aka W+X or DEP), address space layout randomization (ASLR), memory-safety enforcement (e.g., SoftBound), control-flow Integrity (CFI)
• Web security, covering attacks like SQL injection, Cross-site scripting (XSS), Cross-site request forgery (CSRF), and Session hijacking, and defenses that have in common the idea of input validation
• Secure design, covering ideas like threat modeling and security design principles, including organizing ideas like favor simplicity, trust with reluctance, and defend in depth; we present real-world examples of good and bad designs
• Automated code review with static analysis and symbolic execution, presenting foundations and tradeoffs and using static taint analysis and whitebox fuzz testing as detailed examples
• Penetration testing, presenting an overview of goals, techniques, and tools of the trade

Title: Re: Software Security (Coursera)
Post by: M1lak0 on October 17, 2014, 01:38:02 PM

Awesome thankx for the share.. :)

Title: Re: Software Security (Coursera)
Post by: Ghost Face on October 17, 2014, 11:17:33 PM

Fuck would love to take this but cant with college right now. Might take in the summer if they have a rerun.