SYEG 562 Secure Software Development

3 semester hours

Theoretical foundations and best practices in software development security. This course will examine the application of security techniques in all phases of the software life cycle (from requirements analysis through deployment and maintenance) with emphasis on writing secure code and application layer security. This course will provide introductions to the various methodologies to increase secure coding awareness and boost code integrity. Topics will cover common malicious attack vectors in application layer vulnerabilities such as SQL injections, Cross Site Scripting (XSS), and those found in the OWASP Top 10 CWE/SANS TOP 25 Most Dangerous Software Errors. The course will cover static and dynamic code analysis and identify tests, environments, tools, and the documentation of findings. As the tools necessary for effectively conducting secure software development activities largely depends on the technology and languages employed, common languages, platforms, development environments and the unique capabilities of each will be addressed.

Prerequisite: SYEG 560