Arvutiteaduse instituut
Courses.cs.ut.ee Arvutiteaduse instituut Tartu Ülikool
  1. Kursused
  2. 2026/27 sügis
  3. Turvaline tarkvaraarhitektuur (LTAT.05.044)
EN
Logi sisse

Turvaline tarkvaraarhitektuur 2026/27 sügis

  • Main
  • Lectures
  • Project
  • References

Lectures and practical sessions

Lectures take place on Fridays 12:15-14:00 in Narva mnt 18 - 1021.

Practical sessions take place on Fridays 14:15-16:00 in Narva mnt 18 - 2045.

Lecture slides, practical tasks, and supporting material will be added during the semester.

WeekDateLecturePractical session
104.09Course introduction, software architecture, architectural drivers (slides)Team formation, GitHub fork setup, initial discovery (slides)
211.09Architecture in the process, risk-based development, Conway's law, microservices (slides)Initial risk register and iteration plan (slides)
318.09Architectural requirements, quality attributes, security goalsBusiness goals, non-functional requirements, quality attribute scenarios
425.09Describing architecture, viewpoints, C4, documentation qualityC4 context and container diagrams, documentation skeleton
502.10Distributed systems I: scaling, consistency, transactionsData ownership, consistency model, failure modes
609.10Identity and naming in distributed systemsIdentity model, identifiers, entity lifecycle
716.10Authentication, authorization, access control, delegationAuthN/AuthZ architecture, access-control matrix, threat sketches
823.10Distributed systems II: distributed security and feature interactionThreat modeling distributed features and invariants
930.10Interface design I: API principles, leaky abstractions, HTTP contractsKey API specs and event contracts
1006.11Interface design II: evolvability and API securityInterface change request with compatibility constraints
1113.11Security process, touchpoints, architectural risk analysisArchitectural risk analysis practice, mitigations, roadmap
1220.11Systems architecture I: deployment, environments, cloudDeployment model, trust boundaries, SLO drafts
1327.11Systems architecture II: observability, backups, recoveryMetrics, logs, traces, backup and restore, incident playbook
1404.12Systems evolution: technical debt, migrations, deprecationDebt register, evolution plan, risk reassessment
1511.12Guest lecture: supply chain security / SBOM / attestationsApply guest topic to the project
1618.12Final presentations and oral exam preparationFinal package submission and cross-team review

Practical session workflow

Each practical session produces a small architecture artifact for the team project. Teams should keep improving one coherent architecture package rather than producing disconnected weekly files.

Expected working style:

  • bring the current version of your project artifacts;
  • record important decisions as architecture decision records;
  • keep diagrams, risks, APIs, and text consistent with each other;
  • use instructor and peer feedback to revise earlier work.

Materials

Course materials will be published through this course page and/or the course repository. Moodle, if used, will be announced on the main page.

  • Arvutiteaduse instituut
  • Loodus- ja täppisteaduste valdkond
  • Tartu Ülikool
Tehniliste probleemide või küsimuste korral kirjuta:

Kursuse sisu ja korralduslike küsimustega pöörduge kursuse korraldajate poole.
Õppematerjalide varalised autoriõigused kuuluvad Tartu Ülikoolile. Õppematerjalide kasutamine on lubatud autoriõiguse seaduses ettenähtud teose vaba kasutamise eesmärkidel ja tingimustel. Õppematerjalide kasutamisel on kasutaja kohustatud viitama õppematerjalide autorile.
Õppematerjalide kasutamine muudel eesmärkidel on lubatud ainult Tartu Ülikooli eelneval kirjalikul nõusolekul.
Courses’i keskkonna kasutustingimused