SWENG 455: Engineering Quality and Security in Software

Textbook Information

  1. Secure Software Design by Theodor Richardson and Charles N Thies. 1st 2012. Jones & Bartlett Learning. ISBN-13: 97814496266327. ISBN-10: 1449626327
  2. Software Quality Assurance: From Theory to Implementation by Daniel Galin. 1st 2004. Pearson-Addison Wesley. ISBN-13: 9780201709452. ISBN-10: 0201709457

Published Remarks

None

Hardware Requirements

Software Requirements

Proctored Exams

Course Description

Software systems are becoming an integral part of our daily life. In many domains the failure of a software system in not acceptable. Such a failure will have catastrophic effects. Hence, the quality of such software systems becomes so crucial. In this course we will introduce software quality and the associated quality factors.

As software systems advance in complexity so does the threats that they face. Hence, the security of these systems has became so essential. Traditionally security has been thought off as an add-on to an existing system. In this course, we will understand that this is not sufficient. Security should be considered throughout the software development life cycle.

Prerequisite:  SWENG411

Overview

This course provides a detailed explanation of software quality assurance practices and methods throughout the software development life-cycle. It provides a foundation for building secure software by applying security principles to the software development lifecycle. test

Course Outline:

  • Module 1: Intro to Software Quality
  • Module 2: Software Errors
  • Module 3: Introduction to Information Security
  • Module 4: Security Requirements Planning
  • Module 5: Vulnerability Mapping
  • Module 6: Vulnerability Mapping – 2
  • Module 7: Secure Software Architecture and Design
  • Module 8: Secure Software Architecture and Design – 2
  • Module 9: Secure Coding
  • Module 10: Secure Testing
  • Module 11: Secure Deployment and Maintenance
  • Module 12: Microsoft® Security Development Lifecycle (SDL)

Learning Goals

By the end of this course students are expected to:

  • Understand the concepts of software quality assurance.
  • Understand the concept of secure software development.
  • Understand the current and emerging threats
  • Understand the effect of security on the software development life cycle (SDLC).
  • Understand the effect of quality on the SDLC.
  • Ability to integrate security in the software requirements planning and use Use-Cases to model security requirements.
  • Ability to integrate security in software design.

Course Requirements and Grading

Grading Policy

Grading is based on three exams, weekly quizzes, weekly assignments, and course project. The following weights are assigned to the different assessed components of the course:

Category Percentage
Module Quizzes 10%
Module Discussions 5%
Module Assignments 10%
Project (Three Phases) 45%
Exam 1 10%
Exam 2 10%
Exam 3 10%

Assignments: Assignments will be assigned with some Modules. They are designed to enhance your understanding of the material covered in the Module. They are assigned on the Monday of the week and are due by Saturday (11:59pm, US Eastern time) of the same week. Project: This course will have one major group project. In the project you will develop a software system while integrating security in the development cycle. The project is divided intro three phases, requirements, design, and implementation and testing. Each phase is worth 15% of your grade. Quizzes: Quizzes are short and designed to make sure your knowledge on the current topic is sufficient. They are assigned on Monday of the week and are due by Saturday (11:59pm, US Eastern time) of the same week. No late Quizzes will be accepted. Module Discussions: Modules will contain a number of questions that are embedded. You will need to answer these questions through the discussion board. A link to the question will be displayed in the content of the module. It is important that you answer these questions. There will not be a right or wrong answer. It will rather be a pass or fail approach for these questions. I am looking for your best attempt. Answers that are unrelated or unreasonable will not be accepted. Exams: Exams will be given over the course of the semester to encourage your ongoing attention to course material. Covered topics will be drawn largely from the lectures and assigned readings. Test 1 will cover Module 1 to 4. Test 2 will cover Module 5 to 8, and Test 3 will cover Module 9 to 11.

Grade Assignments

Assessments are based on 100 points with final letter grades being assigned as follows:

A A- B+ B B- C+ C D F
100-93 92.9-89 88.9-85 84.9-80 79.9-75 74.9-70 69.9-65 64.9-60 59.9-0