Secure Software Development

This course covers issues and practices associated with secure application development. It starts with exploring the Software Development Life Cycle (SDLC) and making security a holistic component of SDLC. An area of focus will be on the (in)security of software supply chains. The course will also cover threat modeling and applying secure design principles. Along the way, we will visit common software vulnerabilities and how to prevent them. The course will conclude by exploring the unique security challenges and defense mechanisms for developing and deploying agentic AI applications. Prerequisite for advanced standing: CSC 32200 or CSC 33200.