資訊工程研究所(Graduate Institute of Computer Science and Information Engineering)
課程名稱(英文)
System and Software security
課程代碼
4105256_01
授課教師：
Van-Linh Nguyen (阮文齡)
學分數
3
必/選修
選修
開課年級
Undergraduate/Graduate Students
先修科目或先備能力：
課程概述：
Viruses and malware infect millions of computers that some of you may see breaking news daily. In general, attackers often use these malicious programs to steal user data, blackmail businesses, and even bring down national networks, causing billions of dollars in damage per year. This course provides the basics of various security attacks and vulnerabilities (e.g., Buffer Overflow) in Windows and Linux systems and effective prevention methods. From understanding the basics of malicious programs and software security analysis such as assembly programming and reverse engineering, you can know how attackers build malware/viruses and propose a proper defense approach. You will also learn about system forensics through Kali Linux and advanced tools (e.g., Metasploit) to trace security vulnerabilities and corresponding attacks. Finally, DevSecOps and building security APIs, a critical software security development skill for network administrators and secure software developers, are introduced.
學習目標：
1. Acquire the basics of system and software security, assembly programming
3. Acquire state-of-the-art techniques in secure programming
4. Create and build a secure software/API/DevKits following the DevSecOps standards
教科書：
Lecture notes compiled by the teacher
However, the following books may benefit the students
1. Computer Security: Principles and Practice 4th (William Stallings)
2. Gray Hat Hacking: The Ethical Hacker's Handbook 5th (Allen Harper)
3. Software Security: Building Security In (Gary McGraw)
4. Practical Reverse Engineering: x86, x64, ARM, Windows Kernel
5. https://owasp.org/www-community/Source_Code_Analysis_Tools