SECURE SOFTWARE DESIGN

Course Information

Lecturer: Mario Alviano

Assistant: Pierpaolo Sestito (with the help of Lorenzo Grillo)

Office hours: consult my homepage

Microsoft Teams: for code and link search on this page

Promo Videos (most recent up)

Pills (most recent up)

Notice Board

26/09/2025 09:10: The lecture scheduled on Tuesday 21 October is rescheduled on Saturday 18 October (online with MS Teams)

20/09/2025 15:30: Schedule is online.

Dates and Deadlines

Lectures

Tuesday and Thursday in room MT11

1. Introduction + Why design matters for security ⌛⌛

2. Deep modeling + Core concepts of Domain-Driven Design ⌛⌛⌛

3. Code constructs promoting security ⌛⌛

4. Exercises ⌛⌛⌛

5. Domain primitives ⌛⌛

6. Exercises ⌛⌛⌛

7. Ensuring integrity of state + Reducing complexity of state ⌛⌛

8. Exercises ⌛⌛⌛

9. Handling failures securely + Introduction to Test-Driven Development ⌛⌛

10. Exercises ⌛⌛⌛

11. Exercises ⌛⌛

12. Exercises ⌛⌛⌛

13. Python: Type Hints and Validation ⌛⌛

14. Exercises ⌛⌛⌛

15. Advanced tests for Python ⌛⌛

16. Exercises ⌛⌛⌛

17. Django REST Framework - Part 1 ⌛⌛

18. Student Project ⌛⌛⌛

19. Django REST Framework - Part 2 ⌛⌛

20. Student Project ⌛⌛⌛

21. Authentication, authorization and tests in Django REST Framework ⌛⌛

22. Student Project ⌛⌛⌛

23. Student Project + Exam Simulation ⌛⌛

24. Student Project Showcase ⌛⌛⌛

Teaching Material

Books

• Secure by Design - Dan Bergh Johnsson, Daniel Deogun, Daniel Sawano - Manning

• Architecture Patterns with Python - Harry Percival, Bob Gregory – O’Reilly

• Crafting Test-Driven Software with Python - Alessandro Molina – Packt

Links

• https://www.django-rest-framework.org/

• https://docs.pytest.org/en/7.1.x/

• https://www.selenium.dev/

• Basics

  • https://www.w3schools.com/python/

  • https://www.w3schools.com/sql/default.asp

  • https://www.w3schools.com/js/default.asp

Exams

Dates will be added to the calendar when available