Secure Software Engineering

This is my repository for the CSE-60770 Secure Software Engineering course

Homework 1

Vulnerable Dependency Finder

• Compile a knowledge base of known security vulnerabilities using NVD data feeds: https://nvd.nist.gov/vuln/data-feeds
• Identify dependencies from a pom.xml in Maven (Build automation and dependency management tool)
• Match dependencies from pom.xml and knowledge base to output a vulnerable dependencies report

Homework 2

Software Weaknesses and Vulnerabilities

• Understanding Django's {% csrf_token %}
• Acting as a software consultant to identify security vulnerabilities in a web application
• Cracking passwords using brute-force and rainbow tables

Homework 3

Threat Modeling and Django Security

• Patching identified security vulnerabilities
• Threat modeling
• Data flow diagrams

Homework 4

Static Application Security Testing (SAST)

• Compute class hierarchy
• Compute a 1-CFA call graph
• Implement a taint analyzer

Homework 5

Secure Coding and Dynamic Application Security Testing (DAST)

• Implement a dynamic taint analyzer