Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

This semester, I'm offering a course on "secure software development." The course is divided into three parts:

  • Secure Software Engineering
  • Reverse Engineering
  • Secure Coding

Do you know any courses (especially, those offered at universities) with similar content, that you advise me to look at?

share|improve this question
    
Do you target any specific OS and/or programming languages or you want to keep it generic? –  Eugen Constantin Dinca Nov 11 '10 at 22:18
    
@Eugen: I want it to be generic, but most tools I know target the Windows OS. I don't want my students to feel that only Windows suffers from security issues; so both generic courses and courses specific to 'NIX-based OS's are appreciated. –  Sadeq Dousti Nov 13 '10 at 15:01
add comment

13 Answers

up vote 14 down vote accepted

For Reverse Engineering: The University of Helsinki in collaboration with F-Secure offer a course titled Malware Analysis and Antivirus Technologies which has the curriculum available online.
For Secure Coding: CERT is always a good reference, especially for C & C++. They have a Secure Coding in C and C++ course at SEI @ CMU.

share|improve this answer
    
Very useful, thanks! –  Sadeq Dousti Nov 11 '10 at 21:59
    
Funny that someone from Las Vegas suggests a course a university here in Finland. Are we that good here ;) –  Peter Smit Nov 11 '10 at 22:03
    
@Peter Smit: I've found out about the course a few years ago via F-Secure's blog. It's a very small world... –  Eugen Constantin Dinca Nov 11 '10 at 22:08
add comment

I haven't taken the course, but I've heard a lot of good things about the OCSP certification:

http://www.offensive-security.com/information-security-certifications/

share|improve this answer
add comment

A few years ago, I helped set up (via the local branch there of my then-company) a similar course at the University of Amsterdam... but I really don't have any current details, though you should be able to look that up.

The IDC in Israel has a very good program for infosec - http://portal.idc.ac.il/en/schools/cs/progs/ugrad/Pages/securityintheNetEra.aspx. They produce a lot of good research, and are very connected with OWASP.

share|improve this answer
add comment

I find this awesome - http://pentest.cryptocity.net/. This is course done by many well-known security researchers. There is no point in discussing, just check out.

share|improve this answer
1  
that's the old site (down). it's now at cryptocity.squarespace.com –  Jeff Nov 16 '10 at 10:00
    
@seedy, I see no difference. Researchers usually publish their updates link in twitter pointing to site that I have mentioned. And for me it is up and running. –  anonymous Nov 16 '10 at 10:11
    
@Ams, it seems we're both half right. cryptocity.squarespace.com works everywhere, but pentest.cryptocity.net only works outside of the ip subnet of the school that the class is taught at. –  Jeff Nov 16 '10 at 11:18
    
@Ams your link doesnt work here either, but the squarespace one did :) –  Chris Andrè Dale Nov 29 '10 at 13:41
add comment

SANS offer some courses relating to your areas that I have heard good things about. I suggest them because they have a good break down of the topics they cover that might give you some good ideas.

Secure Coding in Java/JEE: Developing Defensible Applications

Reverse-Engineering Malware: Malware Analysis Tools and Techniques

share|improve this answer
    
"How to Get Started With Malware Analysis" by Lenny Zeltser (Instructor for Reverse-Engineering Malware course at SANS Institute) blogs.sans.org/computer-forensics/2010/11/12/… –  Tate Hansen Nov 16 '10 at 1:37
add comment

The University of Pisa offered a course on "Secure Software Development" a year ago.

You can download all the lectures and resources from the official page (it's in Italian, so maybe you'll need Google Translate).

share|improve this answer
add comment

Have you taken a look at MIT's OpenCourseWare? After a quick search I found a course on Network and Computer Security and Computer Systems Architecture (might be useful for the Reverse Engineering part).

You can also try http://academicearth.org/lectures/search/security/ and http://videolectures.net/site/search/?q=security.

share|improve this answer
add comment

This course I took at UCSD is similar and very useful

https://cseweb.ucsd.edu/classes/sp10/cse127/

share|improve this answer
add comment

Stanford University offers an online set of short courses in software security, leading to a Certificate in Advanced Computer Security. The program includes an introductory course on secure software development, and short courses in secure protocols and cryptography, web security, and so on.

share|improve this answer
add comment

The Aspect Security courses appear to have the best content. I don't think too many university programs can match what they have done, but the http://pentest.cryptocity.net one mentioned by Ams in these comments is definitely better than most.

share|improve this answer
add comment

Special Course in Communications Security (Malware Analysis and Antivirus Technologies)

The course teaches students what malicious code is and how it can be detected and analyzed. Topics of the course include malware taxonomy, reverse engineering, code emulation fundamentals, basic cryptoanalysis of malicious crypto, and antivirus engine basics. Course includes a homework project that requires programming skills.

http://www.tml.tkk.fi/Opinnot/T-110.6220/2008/

share|improve this answer
add comment

I am trying to define a syllabus for "Secure Programming" course. In my search, I found the course outline provided by Cyber Defense Institute so complete and useful. See the following link http://www.cyberdefenseinstitute.net/courses/secureprogramming/secureprogramming.html#attachment. Just finding some good textbooks for preparing the content of such a course makes it a good complete reference for secure coding part of your course and other similar courses.

share|improve this answer
    
Thanks, very useful! –  Sadeq Dousti Dec 13 '10 at 14:48
add comment

Langara College offers, or at least they did offer, a security course:

CPSC 2810 (3 credits) (4:0:2) Computer and Information Security

An introduction to the policies, mechanisms, and implementations of computer security. Provides an understanding of threats, including script kiddies; covert channels; and malicious logic such as viruses, worms, time bombs, and trap doors. Students will learn how attacks work, how to defend against attacks, and how to design and administer secure systems and networks.

Prerequisite(s): A minimum "C" grade in one of: CPSC 1280 or 1480; or permission of the department.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.