Secure Programming Techniques Project
- Code: MTAT.07.016 (3 EAP)
- Seminars: Fri 14-16 Liivi 2 - 206 (only on pre-announced weeks)
- Lecturer: Meelis Roos
- Goal: find and fix a new security problem in real software.
- Grading comes 90% from the result of final presentation and report of the project and 10% from keeping up with the in-term deadlines
- Questions: mroos at ut dot ee
First meeting on 14.02.2014 14-16 L2-206.
Outline
- Ideas for projects
- Simple projects are for one person only
- 2-3 person projects are possible, but you need to plan work distribution ahead and show that it seems possible without one student blocking behind other
- Incomprehensive list of source code Scanners
- Find a opensource project for scanning
- Find suitable tools for first steps, use them
- Search for security holes manually
- Find another project if nothing has been found (no later then end of March)
- Document the bug
- Fix the bug
- Fix all bugs of the same kind if possible
- Test and document the fixes
- Send a patch upstream, rewriting it if asked, until the patch is merged
- Give a presentation
Planned meetings
- 14.02.2014 14-16 room 206 - First meeting, intro - audio
- 21.02.2014 14-16 room 206 - Code auditing demo with scanners and manual reading
- 04.04.2014 14-16 room 206 - Midterm meeting: how you have succeeded in finding some bugs
- 30.05.2014 14-16 room 206 - Final presentations