FI:PV286 Secure coding principles - Course Information
PV286 Secure coding principles and practices
Faculty of InformaticsSpring 2025
- Extent and Intensity
- 2/0/1. 3 credit(s) (plus extra credits for completion). Recommended Type of Completion: zk (examination). Other types of completion: z (credit).
In-person direct teaching - Teacher(s)
- Lukasz Michal Chmielewski, PhD (lecturer)
RNDr. Lukáš Ručka (lecturer)
JUDr. Pavel Loutocký, Ph.D., BA (Hons) (seminar tutor)
Mgr. Marek Sýs, Ph.D. (seminar tutor)
RNDr. Antonín Dufka (assistant)
Mgr. Jiří Gavenda (assistant)
Bc. Tomáš Jaroš (assistant)
Mgr. Jan Kvapil (assistant)
Mgr. Roman Lacko (assistant)
Mgr. Milan Šorf (assistant)
Mgr. Štěpánka Trnková (assistant) - Guaranteed by
- Lukasz Michal Chmielewski, PhD
Department of Computer Systems and Communications – Faculty of Informatics
Supplier department: Department of Computer Systems and Communications – Faculty of Informatics - Prerequisites
- Basic knowledge in applied cryptography and IT security, practical experience in programming with C/C++ language, basic knowledge in formal languages and compilers, user-level experience with Windows and Linux OS
- Course Enrolment Limitations
- The course is also offered to the students of the fields other than those the course is directly associated with.
- fields of study / plans the course is directly associated with
- there are 32 fields of study the course is directly associated with, display
- Course objectives
- At the end of this course the student will understand what the typical security issues related to secure coding are. The student will also be able to design applications and write programs in C/C++ and Java in a more secure way.
- Learning outcomes
- After a course completion, the student will be able to:
- able to review source code for typical security bugs;
- able to properly check and sanitize check program input data;
- able to use standard tools for static and dynamic code analysis and interpret results;
- able to describe typical bugs from concurrent program execution and write code without it;
- able to apply systematic methods to produce code with better resiliency against bugs;
- understand basic cryptographic primitives and their proper use in source code; - Syllabus
- Language level vulnerabilities, secure programming techniques and approaches, input processing, static and dynamic code checking, binary defenses and exploits, security testing, integrity of modules, concurrent issues, random number generation and usage, security primitives, security code review.
- Teaching methods
- Lectures, Questionaries, Team project, Written test.
- Assessment methods
- 10 questionnaires from lectures (approximately 10% of the final mark/score), team programming project (approximately 60% of the final mark/score), and final written exam (30% of the final mark/score).
- Language of instruction
- English
- Follow-Up Courses
- Further Comments
- The course is taught annually.
The course is taught: every week. - Listed among pre-requisites of other courses
- PA193 Seminar on secure coding principles and practices
(PV286 || NOW(PV286) ) && SOUHLAS
- PA193 Seminar on secure coding principles and practices
- Enrolment Statistics (Spring 2025, recent)
- Permalink: https://is.muni.cz/course/fi/spring2025/PV286