Secure Software Engineering (SSE)
6/7. Semester
5 ECTS | 4 SWS
Continuous Assessment (CA)
Secure Software from the Start: Develop software that withstands attacks throughout its entire lifecycle—from design and development to deployment and operation.
Contents
- Basic principles of secure software engineering
- Security requirements
- Secure design and threat models
- Architecture analyses
- Secure coding
- Security testing
- Secure deployment
- Security Response
- Protection of own software against manipulation and know-how theft
Competencies
Students are able to
- apply best practices for secure software during software engineering,
- develop acceptance criteria for non-functional security requirements,
- perform threat modeling,
- prevent vulnerabilities during software development,
- analyse existing software regarding vulnerabilities,
- present the results of penetration tests to management.
Literature
- S. Paulus, Basiswissen sichere Software: Aus- und Weiterbildung zum ISSECO Certified Professional for Secure Software Engineering. Heidelberg, Germany: dpunkt.verlag, 2011, ISBN: 978-3-89864-726-7.
- P. Liggesmeyer, Software-Qualität: Testen, Analysieren und Verifizieren von Software. Heidelberg, Germany: Spektrum Akademischer Verlag, 2002, ISBN: 978-3-8274-1118-1.
- M. Howard and D. LeBlanc, Writing Secure Code, 2nd ed. Redmond, WA, USA: Microsoft Press, 2003, ISBN: 978-0-7356-1722-3.
- OWASP Foundation, OWASP: Open Worldwide Application Security Project. [Online]. Available: https://owasp.org.
Lecturer
Recommended Previous Knowledge
-
Erfahrungen in der Software-Entwicklung, zum Beispiel aus dem Softwareprojekt/Medizinisches Softwareprojekt/Unternehmensinformatikprojekt
-
Erste Erfahrungen im Programmieren von Web-Anwendungen für das Beispiel-Szenario
-
Ansonsten: Selbststudium, z.B. mit PHP 5.3: Dynamische Websites professionell programmieren von Christian Wenz und Tobias Hauser (Dezember 2009)
Module Details
| Semester |
6/7 |
| Lecture Language |
German and English |
|
Frequency
|
Not regularly
|
| Credit Points (ECTS)
|
5 |
| Course Coordinator |
Prof. Dr. Sachar Paulus |
| Duration |
1 Semester |
|
Course Achievement
|
None |
|
Prerequisite for exam
|
None |
|
Exam
|
Continuous Assessment (CA) |
Weekly Hours (SWS)
| Lecture |
2 SWS |
| Exercises |
1 SWS |
| Project |
1 SWS |
| Sum |
4 SWS |
Work Load
| Lecture |
30 h |
| Self Study |
30 h |
| Assignments |
30 h |
| Project |
60 h |
| Sum |
150 h |
