We may earn an affiliate commission when you visit our partners.
Michael Hicks
This course we will explore the foundations of software security. We will consider important software vulnerabilities and attacks that exploit them -- such as buffer overflows, SQL injection, and session hijacking -- and we will consider defenses that prevent or mitigate these attacks, including advanced testing and program analysis techniques. Importantly, we take a "build security in" mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems. Successful learners in this course typically have completed sophomore/junior-level undergraduate work in a...
Read more
This course we will explore the foundations of software security. We will consider important software vulnerabilities and attacks that exploit them -- such as buffer overflows, SQL injection, and session hijacking -- and we will consider defenses that prevent or mitigate these attacks, including advanced testing and program analysis techniques. Importantly, we take a "build security in" mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems. Successful learners in this course typically have completed sophomore/junior-level undergraduate work in a...
Read more
This course we will explore the foundations of software security. We will consider important software vulnerabilities and attacks that exploit them -- such as buffer overflows, SQL injection, and session hijacking -- and we will consider defenses that prevent or mitigate these attacks, including advanced testing and program analysis techniques. Importantly, we take a "build security in" mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems. Successful learners in this course typically have completed sophomore/junior-level undergraduate work in a technical field, have some familiarity with programming, ideally in C/C++ and one other "managed" program language (like ML or Java), and have prior exposure to algorithms. Students not familiar with these languages but with others can improve their skills through online web tutorials.
Register for this course and see more details by visiting:
OpenCourser.com/course/l72n09/software
Good to know
Good to know
Know what's good ,
what to watch for , and
possible dealbreakers
Provides a strong foundation for beginners in software security
Teaches industry-standard software vulnerability and attack mitigation techniques
Taught by an instructor specializing in software security
Emphasizes building security into the development cycle
Assumes familiarity with programming, including C/C++ and a managed language
May require additional learning resources for students unfamiliar with required programming languages
Save this course
Save Software Security to your list so you can find it easily later:
Save
Save
Reviews summary
Software security essentials
This course is essential for software developers and security professionals who want to learn more about software security. It will teach you the foundational concepts of software security, including buffer overflows, SQL injection, and session hijacking. You'll also learn how to prevent and mitigate these attacks with a focus on secure software throughout the development process.
Provides a detailed exploration of software security concepts.
"A deep technical course. The course provides a relatively in-depth knowledge of software security."
Involves hands-on projects, including analyzing and exploiting test code.
"Challenging course, goes beyond most security MOOC's by incorporating projects that have the student analyze and exploit test code."
Focuses on implementing security measures throughout the development cycle.
"Importantly, we take a "build security in" mentality, considering techniques at each phase of the development cycle that can be used to strengthen the security of software systems."
May be challenging for beginners or those without a strong programming background.
"Like someone else wrote, the first two week material is too hard to absorb."
Requires familiarity with C/C++ programming.
"The first part covers buffer overflows and related memory attacks. Buffer overflows are really well explained, but the quiz and programming project can be difficult if you don't know C."
Activities
Be better prepared
before
your course. Deepen your understanding
during
and
after
it. Supplement your coursework and achieve mastery of the topics covered
in Software Security with these
activities:
Review C/C++ Programming Concepts
Show steps
Solidify your grasp of programming fundamentals, particularly in C/C++. This will make it easier for you to engage with course content from the start.
Browse courses on
Programming Basics
Show steps
-
Review core programming concepts like variables, data types, and control flow using online tutorials.
-
Practice writing and compiling simple C/C++ programs to reinforce your understanding.
Refresh C/C++
Show steps
Solidify your C/C++ skills before taking this course to make understanding the course content easier.
Browse courses on
C
Show steps
-
Review C/C++ syntax and basic data structures
-
Practice solving simple programming problems in C/C++
Review Algorithms
Show steps
Review basic algorithms, searching and sorting techniques to provide a strong foundation for understanding advanced concepts in this course.
Browse courses on
Algorithm
Show steps
-
Go over common algorithms, their time and space complexity, and applications
Six other activities
Expand to see all activities and additional details
Show all nine activities
Buffer Overflow Tutorial
Show steps
Engage with tutorials on buffer overflows to enhance your understanding of this common vulnerability.
Browse courses on
Buffer Overflow
Show steps
-
Find tutorials on buffer overflows and follow along
SQL Injection Practice
Show steps
Practice identifying and exploiting SQL injection vulnerabilities to better understand and mitigate them.
Browse courses on
SQL Injection
Show steps
-
Solve practice problems involving SQL injection
Session Hijacking Defense Report
Show steps
Create a report on session hijacking defense techniques to strengthen your understanding of how to prevent this attack.
Browse courses on
Session Hijacking
Show steps
-
Research session hijacking and common defense techniques
-
Outline the report structure and content
-
Write the report, including case studies and examples
Security CTF Competition
Show steps
Participate in a security CTF competition to put your knowledge into practice and challenge yourself.
Show steps
-
Find and register for a CTF competition
-
Team up with others or participate individually
-
Solve security-related challenges and capture flags
Mentor at a Cybersecurity Club
Show steps
Share your knowledge by mentoring students in a cybersecurity club, reinforcing your understanding while helping others.
Browse courses on
Mentoring
Show steps
-
Find a cybersecurity club or program to volunteer with
-
Prepare materials and activities for mentoring sessions
-
Guide and support students in their cybersecurity journey
Security Audit Project
Show steps
Conduct a security audit on a small project or website to gain practical experience in identifying and mitigating security risks.
Browse courses on
Security Audit
Show steps
-
Choose a project or website for the audit
-
Plan and scope the security audit
-
Perform vulnerability scanning and analysis
-
Write a security audit report and provide recommendations
Review C/C++ Programming Concepts
Show steps
Solidify your grasp of programming fundamentals, particularly in C/C++. This will make it easier for you to engage with course content from the start.
Browse courses on
Programming Basics
Show steps
Show steps
Show steps
- Review core programming concepts like variables, data types, and control flow using online tutorials.
- Practice writing and compiling simple C/C++ programs to reinforce your understanding.
Refresh C/C++
Show steps
Solidify your C/C++ skills before taking this course to make understanding the course content easier.
Browse courses on
C
Show steps
Show steps
Show steps
- Review C/C++ syntax and basic data structures
- Practice solving simple programming problems in C/C++
Review Algorithms
Show steps
Review basic algorithms, searching and sorting techniques to provide a strong foundation for understanding advanced concepts in this course.
Browse courses on
Algorithm
Show steps
Show steps
Show steps
- Go over common algorithms, their time and space complexity, and applications
Six other activities
Expand to see all activities and additional details
Show all nine activities
Buffer Overflow Tutorial
Show steps
Engage with tutorials on buffer overflows to enhance your understanding of this common vulnerability.
Browse courses on
Buffer Overflow
Show steps
Show steps
Show steps
- Find tutorials on buffer overflows and follow along
SQL Injection Practice
Show steps
Practice identifying and exploiting SQL injection vulnerabilities to better understand and mitigate them.
Browse courses on
SQL Injection
Show steps
Show steps
Show steps
- Solve practice problems involving SQL injection
Session Hijacking Defense Report
Show steps
Create a report on session hijacking defense techniques to strengthen your understanding of how to prevent this attack.
Browse courses on
Session Hijacking
Show steps
Show steps
Show steps
- Research session hijacking and common defense techniques
- Outline the report structure and content
- Write the report, including case studies and examples
Security CTF Competition
Show steps
Participate in a security CTF competition to put your knowledge into practice and challenge yourself.
Show steps
Show steps
Show steps
- Find and register for a CTF competition
- Team up with others or participate individually
- Solve security-related challenges and capture flags
Mentor at a Cybersecurity Club
Show steps
Share your knowledge by mentoring students in a cybersecurity club, reinforcing your understanding while helping others.
Browse courses on
Mentoring
Show steps
Show steps
Show steps
- Find a cybersecurity club or program to volunteer with
- Prepare materials and activities for mentoring sessions
- Guide and support students in their cybersecurity journey
Security Audit Project
Show steps
Conduct a security audit on a small project or website to gain practical experience in identifying and mitigating security risks.
Browse courses on
Security Audit
Show steps
Show steps
Show steps
- Choose a project or website for the audit
- Plan and scope the security audit
- Perform vulnerability scanning and analysis
- Write a security audit report and provide recommendations
Career center
Learners who complete Software Security will develop knowledge and skills
that may be useful to these careers:
Software Security Researcher
Software Security Researcher
Software Security Researchers identify and analyze vulnerabilities in software systems. They develop new techniques and tools to improve software security and defend against attacks. This course may be useful in preparing for a career as a Software Security Researcher by providing a strong foundation in software security principles and attack vectors.
Chief Information Security Officer (CISO)
Chief Information Security Officer (CISO)
Chief Information Security Officers (CISOs) are responsible for the overall security of an organization's information systems and networks. They develop and implement security policies, oversee security teams, and report to senior management on security risks. This course may assist in preparing for this role by providing a comprehensive understanding of software security principles and best practices.
Information Security Manager
Information Security Manager
Information Security Managers oversee the development and implementation of an organization's security program. They assess risks, develop security policies, and manage security teams. This course may be helpful in preparing for this role by providing a strong foundation in software security principles and management techniques.
Security Consultant
Security Consultant
Security Consultants provide organizations with advice and assistance on security matters. They assess risks, develop security plans, and implement security measures. This course may serve as useful preparation for this role by providing instruction in software security principles and best practices.
IT Auditor
IT Auditor
IT Auditors evaluate the security and effectiveness of an organization's computer systems and networks. They review and assess an organization's security policies, procedures, and controls, and make recommendations for improvement. This course may be useful in preparing for this role by providing insight into software security risks and mitigation techniques.
IT Security Specialist
IT Security Specialist
IT Security Specialists plan, implement, and maintain security measures to protect an organization's computer networks and systems. They assess risks, develop security policies, and monitor systems for potential vulnerabilities. This course may serve as useful preparation for this role by providing instruction in software security best practices and vulnerability assessment techniques.
Cybersecurity Analyst
Cybersecurity Analyst
Cybersecurity Analysts plan, implement, and monitor security measures to protect an organization's computer networks and systems. They investigate security breaches, respond to incidents, and work to improve the overall security posture of an organization. This course may aid in preparing for this role by providing a solid foundation in software security principles and incident response techniques.
Penetration Tester
Penetration Tester
Penetration Testers assess the security of computer systems and networks by simulating attacks. They identify vulnerabilities that could be exploited by attackers and recommend measures to mitigate these risks. This course may prove useful in preparing for a career as a Penetration Tester by providing instruction in common attack vectors and software security best practices.
Security Engineer
Security Engineer
Security Engineers implement and maintain security measures to protect computer systems and networks. They design security architectures, configure firewalls and intrusion detection systems, and monitor networks for suspicious activity. This course may be useful in preparing for this job by helping to build a foundation in software security techniques and best practices.
Information Security Analyst
Information Security Analyst
Information Security Analysts design, implement, and maintain security measures to protect an organization's computer networks and systems. They assess risks, develop security policies, and monitor systems for potential vulnerabilities. This course may be useful in preparing for this role by providing a foundation in software security concepts and techniques.
Software Architect
Software Architect
Software Architects design and develop software solutions that meet an organization's needs. They analyze system requirements, determine software specifications, and oversee the entire development process. This course may help in preparing for this job by providing a comprehensive understanding of software security principles and techniques.
Computer Programmer
Computer Programmer
Computer Programmers write, test, and maintain the code that makes computers and applications function. They translate the requirements of software users into instructions that computers can follow. This course may be useful in preparing for a career as a Computer Programmer by helping to build a foundation in the principles and practices of software security.
Software Engineer
Software Engineer
Software Engineers apply computer science principles to the design, development, and maintenance of software systems. They create new software and modify existing applications to improve or enhance the functionality of systems. This course may help in preparing for the job by helping build a foundation in software security best practices.
Software Developer
Software Developer
Developing software from conception to implementation, Software Developers play a large role in the design, construction, and delivery of valuable products across many industries. From web to mobile to networking, the work Software Developers do reaches nearly every person in the modern business world. This course may assist in preparing for the job by helping build a foundation in software security principles.
For more career information including salaries, visit:
OpenCourser.com/course/l72n09/software
Reading list
We've selected nine books
that we think will supplement your
learning. Use these to
develop background knowledge, enrich your coursework, and gain a
deeper understanding of the topics covered in
Software Security .
Save
Practical guide for software developers on how to write secure code. It covers a wide range of topics, including buffer overflows, SQL injection, and cross-site scripting.
Provides a comprehensive overview of web application security. It valuable reference for developers, security professionals, and anyone else who wants to learn more about this topic.
This database of known software vulnerabilities. It valuable reference for security professionals who need to understand the vulnerabilities that are known to exist in software.
Provides a comprehensive overview of security engineering. It valuable reference for security professionals who need to understand the basics of security engineering.
Save
Provides a comprehensive overview of cryptography. It valuable reference for security professionals who need to understand the basics of cryptography.
Save
Provides a comprehensive overview of network security. It valuable reference for security professionals who need to understand the basics of network security.
Provides a comprehensive overview of secure coding principles and practices. It valuable reference for software developers who want to write more secure code.
Save
Provides a detailed look at penetration testing. It valuable resource for security professionals who want to learn how to conduct penetration tests.
Provides a detailed look at the most common web application vulnerabilities. It good resource for developers who want to learn how to test and defend against these vulnerabilities.
For more information about how these books relate to this course, visit:
OpenCourser.com/course/l72n09/software
Share
Similar courses
Here are nine courses similar to
Software Security .
Physical and Advanced Side-Channel Attacks
OpenCourser.com/course/cczvcz/physical
Physical and Advanced Side-Channel Attacks
Most relevant
Secure Software Development: Requirements, Design, and Reuse
OpenCourser.com/course/fsid42/secure
Secure Software Development: Requirements, Design, and...
Most relevant
Cache Side-Channel Attacks and Mitigations
OpenCourser.com/course/94mrov/cache
Cache Side-Channel Attacks and Mitigations
Most relevant
Secure Software Development: Verification and More Specialized Topics
OpenCourser.com/course/iu1k9c/secure
Secure Software Development: Verification and More...
Most relevant
Between Physical and Sofware: Fault Attacks, Side Channels, and Mitigations
OpenCourser.com/course/v3vt4r/between
Between Physical and Sofware: Fault Attacks, Side...
Transient-Execution Attacks: Understanding Meltdown and Spectre
OpenCourser.com/course/leie1c/transient
Transient-Execution Attacks: Understanding Meltdown and...
Network Security Basics
OpenCourser.com/course/b9s3qo/network
Network Security Basics
Cybersecurity Fundamentals
OpenCourser.com/course/6dyzny/cybersecurity
Cybersecurity Fundamentals
Secure Software Development: Implementation
OpenCourser.com/course/a8kqk7/secure
Secure Software Development: Implementation
Time
32 hours
Via
Coursera
Institution
University of Maryland, College Park
Instructor
Michael Hicks
This course belongs to a
collection
called
Cybersecurity. It's comprised of six courses:
- Hardware Security
- Usable Security
- Software Security (viewing)
- Cybersecurity Capstone Project
- Cryptography
- Cybersecurity Fundamentals
Good to know
Provides a strong foundation for beginners in software security
Teaches industry-standard software vulnerability and attack mitigation techniques
Taught by an instructor specializing in software security
Emphasizes building security into the development cycle
Assumes familiarity with programming, including C/C++ and a managed language
May require additional learning resources for students unfamiliar with required programming languages
Our mission
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
Affiliate disclosure
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.
© 2016 - 2024 OpenCourser