TDDC90 Software Security
Schedule
The following is a brief schedule of lectures and labs. Here you will also find slides for the lectures. We will try to make slides available the day before the lecture.
Click here to check the detailed schedule on the web (TimeEdit).
Schedule for lectures
| Date | Topic | Lecturer |
| 5/11 | Course introduction | Ulf Kargén |
| 6/11 | Secure software development and secure design and Software reviews
Recording from 2021 here (Note: ~30% changed since then. Software reviews not covered.) |
Ulf Kargén |
| 7/11 |
Memory safety and secure code I
Recording from 2021 here (Note: old lecture still discuss 32-bit x86) |
Ulf Kargén |
| 12/11 |
Memory safety and secure code II
Recording from 2021 here (Note: a few changes since then) |
Ulf Kargén |
| 19/11 | Static analysis I
Recording from 2020 here (Note: a few changes since then) |
Ahmed Rezine |
| 21/11 |
Static analysis II
Recording from 2020 here (Note: a few changes since then) |
Ahmed Rezine |
| 3/12 |
Web security
Recording from 2021 here (Note: some minor additions since then) |
Ulf Kargén |
| 12/12 | Security testing and course summary
Recording from 2021 here (Note: some minor additions since then) |
Ulf Kargén |
Seminar
There will be one seminar with mandatory attendance as part of the INSPECTION assignment at 27/11. See the Labs page for more information.
If you know beforehand that you cannot attend, please send an email to Ulf Kargén (ulf.kargen@liu.se) AS SOON AS POSSIBLE. If we deem that you have a valid reason for being absent, you will be given an extra assignment instead.
Schedule for labs
This is an outline of which labs you are recommended to work with during the different scheduled lab sessions, but you are of course allowed to work on any lab in the course at any of the sessions. However, note that Ahmed will only be available for demoing of lab solutions during the lab session on 26/11 and 28/11. You are therefore strongly advised to do the STATIC lab during the sessions that are scheduled for this purpose.
Note that lab sessions are primarily an opportunity to get feedback and help from supervisors. You will likely need to work with the labs also outside of the scheduled sessions.
| Date | Lab moment | Supervisor(s) |
| 20/11 (double slot) | PONG (Review) | Ulf Kargén |
| 26/11 | STATIC | Ahmed Rezine and Ulf Kargén |
| 28/11 | STATIC | Ahmed Rezine and Ulf Kargén |
| 4/12 (double slot) | WEBSEC/PONG (Exploit) | Ulf Kargén |
| 5/12 | PONG (Exploit) | Ulf Kargén |
| 9/12 | PONG (Exploit/Mitigation) | Ulf Kargén |
| 11/12 | PONG Mitigation) | Ulf Kargén |
Page responsible: Ulf Kargén
Last updated: 2025-11-05
