Semester.ly

Johns Hopkins University | EN.650.460

Software Vulnerability Analysis

3.0

credits

Average Course Rating

(4.84)

Competent execution of security assessments on modern software systems requires extensive knowledge in the reverse engineering and vulnerability analysis technical domains. This course examines software vulnerability analysis relevant theory and its application within security assessments in detail. Key topics include historical vulnerabilities, their corresponding exploits, and any associated preventative measures. Fundamental tools and techniques for performing software reverse engineering and vulnerability analysis are covered extensively. The format of this course includes lectures and hands-on assignments. Students will complete and demonstrate a project as part of the course.

Fall 2012

(4.8)

Fall 2013

(4.89)

Fall 2012

Professor: Stephen Checkoway

(4.8)

Students enjoyed learning about the different vulnerabilities of software. The course was challenging and practical. However, students felt the class did not sufficiently cover practical attacks, like the CSRF attack. The course would improve if there was more supplemental material and hands-on learning to help students understand the content. Prospective students should know that this course is somewhat

Fall 2013

Professor: Stephen Checkoway

(4.89)

Students thought this was an excellent course because of the very hands-on projects, as well as the interesting lectures that are current and informative about some of the latest software trends. Students felt that the course was unique and very relevant to their majors. Some students found that the homework did not really relate to what was discussed in class and wanted the course to include more problem-solving examples, either in the homework or on the exams. Suggestions for improvement included adding in more current articles and studies to keep the lectures up-to-date, and including quizzes to ensure that students actual y read the assignments. Students also would have liked to spend more time during the second half of the semester going over web security instead of focusing on host security. Prospective students are highly encouraged to take this course for the hands-on experiences and are interested in software security. Before taking this course, students should have a firm understanding of C, and a familiarity with web development (like knowing Javascript)is also extremely useful.