EvilZone
Other => Found it on the Webs => : Kiuhnm October 17, 2014, 12:30:42 PM
-
Coursera offers a free course called Software Security which is about to start (20 Oct):
https://www.coursera.org/course/softwaresec (https://www.coursera.org/course/softwaresec)
Course Syllabus
In addition to a brief introductory sequence, the course is broken into six units, one per week:- Low-level, memory-based attacks, including stack smashing, format string attacks, stale memory access attacks, and return-oriented Programming (ROP)
- Defenses against memory-based attacks, including stack canaries, non-executable data (aka W+X or DEP), address space layout randomization (ASLR), memory-safety enforcement (e.g., SoftBound), control-flow Integrity (CFI)
- Web security, covering attacks like SQL injection, Cross-site scripting (XSS), Cross-site request forgery (CSRF), and Session hijacking, and defenses that have in common the idea of input validation
- Secure design, covering ideas like threat modeling and security design principles, including organizing ideas like favor simplicity, trust with reluctance, and defend in depth; we present real-world examples of good and bad designs
- Automated code review with static analysis and symbolic execution, presenting foundations and tradeoffs and using static taint analysis and whitebox fuzz testing as detailed examples
- Penetration testing, presenting an overview of goals, techniques, and tools of the trade
-
Awesome thankx for the share.. :)
-
Fuck would love to take this but cant with college right now. Might take in the summer if they have a rerun.