Riassunto esame Secure Programming Laboratory, prof. Nocera

Appunti Secure Programming Laboratory

Prof.: Francesco Nocera

A.A.: 2020/2021

Indice

Capitolo 1

• Security: definition…………………………………………………………...…………….. 1
• What security protects……………………………………………………………………… 1
• Safety and Failure: definitions……………………………………………………………….1

Capitolo 2

• Attacks: vulnerabilities and exploit…………………………………………………………. 2
• IBM Taxonomy of attackers………………………………………………………………... 2
• Security Pillars: Basic and additionals…………………………………………………….... 2

Capitolo 3

• Software Security Engineering…………………………………………………………….. 3
• Security base principles…………………………………………………………………….. 3
• Security core activities……………………………………………………………………… 3
• Software Development Life Cycle (SDLC)………………………………………………… 4
• Software security Tools…………………………………………………………………... 4
• Software security Methodologies………...………………………………………….. 4
• …………………………………………… …………….Good practices and Bad practices 4

Capitolo 4

• Requirements Engineering………………………………………………………………… 5
• Functional Requirements………………………………………………………………….. 5
• Non Functional Requirements…………………………………………………………….. 5
• Security Requirements…………………………………………………………………….. 6
• Security Requirements Representation…………………………………………………..…7
• Related (to security) requirements………………………………………………………….7

Capitolo 5

• Security Risk main constituents…………………………………………………………… 8
• Security Risk Analysis Step………………………………………………………………... 8

Capitolo 6

• From Code to programs…………………………………………………………………… 10
• …………………..………………………………………………………………..ELF file 10
• ……………………………………………..Memory management and memory segments 11
• Stack…&helli