Introduction to Software Security

Videos by Elisa Heymann and Barton P. Miller
Text by Elisa Heymann, Loren Kohnfelder and Barton P. Miller

Contacts: elisa@cs.wisc.edu and bart@cs.wisc.edu.

© 2024 Elisa Heymann, Barton P. Miller and Loren Kohnfelder.

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.

Module 1: Introduction

1.1 Welcome and Overview 1.2.1 Introduction (part 1) Basic Terminology English, Español 1.2.2 Introduction (part 2) Threats English, Español 1.2.3 Introduction (part 3) Risks and Basic Concepts English, Español 1.3 Thinking Like an Attacker: Owning the Bits English, Español

Module 2: Thinking Like a Designer

2.1 Secure Design Principles 2.2 Overview of Threat Modeling 2.3 Microsoft Security Design Lifecycle and Threat Modeling Methodology 2.4 Microsoft DREAD Threat Categories 2.5 PASTA Threat Modeling Methodology

Module 3: Thinking Like an Programmer: Secure Programming

3.1 Pointers and Strings English, Español 3.2 Numeric Errors English, Español 3.3 Directory Traversal English, Español 3.4 Exceptions English, Español 3.5 Serialization English, Español 3.6 Privilege, Sandboxing, Environments 3.7 Host Name Authentication 3.8 Introduction to Injection Attacks English, Español 3.8.1 SQL Injections English, Español 3.8.2 Command Injections English, Español 3.8.3 Code Injections English, Español 3.8.4 XML Injections English, Español 3.9.1 Web Attacks: Background English, Español 3.9.2 Web Attacks: Cross Site Scripting (XSS) English, Español 3.9.3 Web Attacks: Cross Site Request Forgery (CSRF) English, Español 3.9.4 Web Attacks: Session Management English, Español 3.9.4b Web Attacks: CORS English 3.9.5 Web Attacks: Redirection English, Español 3.10.1 Mobile: Background English, Español 3.10.2 Mobile: Attacks English, Español

Module 4: Defensive Techniques

4.1 Address Space Layout Randomization English 4.2 Memory Safety Checks English 4.3 Control Flow Integrity Checks

Module 5: Thinking Like an Analyst: In-Depth Vulnerability Assessment

5.1 Introduction to FPVA, First Principles Vulnerability Assessment English 5.2 FPVA Step 1: Architectural Analysis (part 1) English 5.2 FPVA Step 1: Architectural Analysis (part 2) English 5.3 FPVA Step 2: Resource Identification English 5.4 FPVA Step 3: Trust and Privilege Analysis English 5.5 FPVA Step 4: Component Analysis (part 1) English 5.5 FPVA Step 4: Component Analysis (part 2) English 5.5 FPVA Step 4: Component Analysis (part 3) English 5.6 FPVA Step 5: Dissemination of Results 5.7 The Manager's Point of View: Responding to a Vulnerability English

Module 6: Thinking Like an Analyst: Automated Assessment Tools

6.1 How Static Analysis Tools Work (part 1) English	6.2 How Static Analysis Tools Work (part 2)	6.3 Tools for C and C++	6.4 Tools for Java
6.5.1 Dependency Analysis Tools: Conceptual Background English	6.5.2 Dependency Tools: How to Use the Tools English	6.6 Using Tools in the SWAMP English

Module 7: Dynamic Techniques (Fuzz Testing and Other Checkers)

7.1 Introduction to Fuzz Testing English	7.2.1 Classic Fuzz Testing Section 1: Background English	7.2.2 Classic Fuzz Testing Section 2: Command Line Studies English	7.2.3 Classic Fuzz Testing Section 3: GUI-Based Studies English
7.2.4 Classic Fuzz Testing Sections 4 & 5: Other Studies, Commentary English	7.3 Fuzz Testing with AFL English	7.4 Memory Checking Tools

Module 8: Secure Use of Cryptography

8.1 Basic Cryptography Concepts English

8.2 Java Crypto API Misuses and Cryptoguard English

Supplementary Sections

Glossary of Terms

Last modified: Fri Jan 17 12:56:40 PM CST 2025 by bart