Credits: 5EC
Delivery: This course is not tele-lectured.
Motivation: Security vulnerabilities often arise due to programming errors in the source code of an application. Recent programming errors with severe security implications include Heartbleed (buffer over-read), Shellshock (code injection), and goto-fail (ill-formated code). Programming languages can help developers to prevent programming errors like these by defining coding principles and detecting violations of those principles through dynamic and static code analysis. Such language-based countermeasures relieve software developers of part of the burden of ensuring software security. But how to select and apply language-based countermeasures?
Synopsis:
This course studies dynamic and static code analysis techniques as language-based countermeasures to security vulnerabilities. In particular, we will investigate and compare the trade-offs of the following countermeasures:
- Dynamic analysis: Run-time monitoring
- Dynamic analysis: Compile-time instrumentation
- Static analysis: Type systems
- Static analysis: Data-flow analysis
- Static analysis: Abstract interpretation
To facilitate a precise study and comparison, we will define the above techniques formally in class. To facilitate student experimentation and exploration of trade-offs, students will implement the above techniques in homework assignments.
Learning outcomes: The student will be able to:
- Describe the nature of security vulnerabilities in software systems.
- Explain different language-based countermeasures to security vulnerabilities and compare their respective trade-offs.
- Formally define variations of the dynamic and static analyses discussed in class.
- Contrast programming languages based on the set of countermeasures they provide.
Lecturers: Prof Dr Eelco Visser
Examination: Oral or written exam and homework assignments.
Contents:Language semantics: tracing semantics, interpretation, compilation; Dynamic-analysis countermeasures: monitoring, runtime instrumentation; Static-analysis countermeasures: type systems, data-flow analysis, abstract interpretation.