SECURE SOFTWARE DESIGN

Course Information

Lecturer: Mario Alviano

Office hours: consult my homepage

Microsoft Teams: for code and link search on this page

Promo Videos (most recent up)

Pills (most recent up)

Notice Board

10/09/2024 14:30: Schedule is online.

10/09/2024 14:50: No lecture on 10 and 15 October.

10/09/2024 14:50: No lecture on 5 and 7 November.

27/09/2024 08:50: Thursday lectures are anticipated at 09:00.

15/11/2024 12:40: Online lectures on Saturday 7 December and Saturday 14 December.

Dates and Deadlines

Lectures

Tuesday and Thursday in room MT11

1. Introduction + Why design matters for security ⌛⌛

2. Deep modeling ⌛⌛⌛

3. Core concepts of Domain-Driven Design ⌛⌛

4. Code constructs promoting security ⌛⌛⌛

5. Domain primitives ⌛⌛

6. Ensuring integrity of state ⌛⌛⌛

7. Reducing complexity of state⌛⌛

8. Handling failures securely ⌛⌛⌛

9. Exercises ⌛⌛

10. Introduction to Test-Driven Development ⌛⌛⌛

11. Python: Type Hints and Validation ⌛⌛

12. Advanced tests for Python ⌛⌛⌛

13. Exercises ⌛⌛

14. Exercises ⌛⌛⌛

15. Django REST Framework - Part 1 ⌛⌛

16. Django REST Framework - Part 2 ⌛⌛⌛

17. Authentication, authorization and tests in Django REST Framework ⌛⌛

18. Exercises ⌛⌛⌛

19. Student Project ⌛⌛⌛

20. Student Project ⌛⌛

21. Student Project ⌛⌛⌛

22. Student Project ⌛⌛

23. Exam Simulation ⌛⌛

24. Student Project Showcase ⌛⌛⌛

Teaching Material

Books

• Secure by Design - Dan Bergh Johnsson, Daniel Deogun, Daniel Sawano - Manning

• Architecture Patterns with Python - Harry Percival, Bob Gregory – O’Reilly

• Crafting Test-Driven Software with Python - Alessandro Molina – Packt

Links

• https://www.django-rest-framework.org/

• https://docs.pytest.org/en/7.1.x/

• https://www.selenium.dev/

• Basics

  • https://www.w3schools.com/python/

  • https://www.w3schools.com/sql/default.asp

  • https://www.w3schools.com/js/default.asp

Exams

Dates will be added to the calendar when available