軟體安全與逆向工程

臺北科技大學 115-1 學期課程，課號 361368。

課程大綱

本課程除了介紹軟體開發架構及安全保護的原理之外，更著重在軟體開發平台的實際操作使用，例如:iOS或Android的開發平台等，並以國網中心所建置的CDX雲端資安攻防平台進行實作分析與演練，讓學生能更了解技術原理的實際應用情境。課程內容包含：軟體開發流程 ●軟體潛在威脅 ●惡意軟體偵測 (malware detection) ●網頁程式安全 (Web application security) ●行動應用軟體安全 (Mobile App security): iOS, Android ●App漏洞與弱點 (Vulnerabilities in Apps) ●App 安全檢測 (Security testing of Apps): static, dynamic ●逆向工程 (reverse engineering) 英文概述 English Description The course aims to introduce principles of software development architecture and associated security technologies. The course also focuses on discussing security issues of actual operations on software development platforms, such as iOS or Android platforms, etc. Students will use CDX cloud platform to exercise practical analysis regarding security attack and defense events, and students are expected to possess better understand of practical applications of security issues for software development. Course contents including: ●Software developing procedure ●Potential threats for software development ●Malware detection ●Web application security ●Mobile App security: iOS, Android ●Vulnerabilities in Apps ●App Security testing: static, dynamic ●Reverse engineering

課程進度

wk1-2: Introudction of Software Secutiy Development Life Cycle wk3: Potential threats for software development wk4: Malware detection wk5: lab wk6: Web application security wk7: Mobile App security: iOS, Android wk8: Vulnerabilities in Apps wk9-10: Lab wk11-14: Reverse engineering wk15-16: Lab Wk 17: Remote Group Project Recording and Project Submission Wk 18: Peer Evaluation

評量方式

Attendance: 10% Individual Project: 30% Team Project: 40% Presentation: 20%

教材

【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】 使用外文原文書：否 Class material: Handout Reference: NIST 800-160 Secret Reverse Engineering Eldad Eilam