SECURE SOFTWARE DESIGN

Course Information

Lecturer: Mario Alviano

Office hours: consult my homepage

Microsoft Teams: for code and link search on this page

Promo Videos (most recent up)

Pills (most recent up)

Notice Board

30/09/2023 09:30: Shorter lecture on Thursday 12 October (we terminate at 18:30).

09/10/2023 08:45: No lecture on Tuesday 21 November.

16/10/2023 14:25: No lecture on Thursday 2 November.

05/12/2023 09:45: No lecture on Tuesday 19 December.

Dates and Deadlines

Lectures

Tuesday and Thursday in room MT11

1. Introduction + Why design matters for security ⌛⌛

2. Deep modeling ⌛⌛⌛

3. Core concepts of Domain-Driven Design ⌛⌛

4. Code constructs promoting security - part 1 ⌛⌛⌛

5. Code constructs promoting security - part 2 ⌛⌛

6. Domain primitives ⌛⌛

7. Exercises on domain primitives ⌛⌛

8. Ensuring integrity of state ⌛⌛⌛

9. Reducing complexity of state⌛⌛

10. Handling failures securely ⌛⌛⌛

11. Python: Type Hints and Validation ⌛⌛

12. Introduction to Test-Driven Development ⌛⌛

13. Exercises on TDD ⌛⌛⌛

14. Seminaries ⌛⌛⌛

15. Advanced tests for Python ⌛⌛

16. TUI example ⌛⌛⌛

17. Django REST Framework - Part 1 ⌛⌛⌛

18. Django REST Framework - Part 2 ⌛⌛

19. Authentication, authorization and tests in Django REST Framework ⌛⌛⌛

20. Student Project ⌛⌛

21. Student Project ⌛⌛⌛

22. Student Project ⌛⌛

23. Exam Simulation + Student Project ⌛⌛⌛

24. Student Project Showcase ⌛⌛⌛

Teaching Material

Books

• Secure by Design - Dan Bergh Johnsson, Daniel Deogun, Daniel Sawano - Manning

• Architecture Patterns with Python - Harry Percival, Bob Gregory – O’Reilly

• Crafting Test-Driven Software with Python - Alessandro Molina – Packt

Links

• https://www.django-rest-framework.org/

• https://docs.pytest.org/en/7.1.x/

• https://www.selenium.dev/

• Basics

  • https://www.w3schools.com/python/

  • https://www.w3schools.com/sql/default.asp

  • https://www.w3schools.com/js/default.asp

Exams

Dates will be added to the calendar when available