Schedule #

Deadlines

  • Projects (~ every 2 weeks): P01 P02 P03

  • Workshops (~ every class): W01 W02 W03 W04 W05 W06 W07 W08

  • Midterm 1: midterm1 (Wed, Feb 5 - 4:30pm , in )

  • Midterm 2: midterm2 (Wed, Mar 5 - 4:30pm , in )

  • Final exam: final (Wed, Apr 30 - 3:30pm , in )

Week 1 #

Monday, 2025-01-06 - Friday, 2025-01-10

Mon - Jan 06, 2025| First day of classes
Mon - Jan 06, 2025
04:30pm-05:45pm
Lecture 1: Course Introduction
Slides, Recording
Mentioned Resources:
Wed - Jan 08, 2025
04:30pm-05:45pm
Lecture 2: Juiceshop, Webgoat, Developer Tools
Slides, Recording
Mentioned Resources:

Week 2 #

Monday, 2025-01-13 - Friday, 2025-01-17

Mon - Jan 13, 2025
04:30pm-05:45pm
Lecture 3: OWASP Top 10 overview, Injection (A3)
Slides, Recording
Mentioned Resources:
Mon - Jan 13, 2025|
Wed - Jan 15, 2025
04:30pm-05:45pm
Lecture 4: SQL Injection (A3) and Software and Data Integrity Failures (A8)
Slides, Recording
Mentioned Resources:
Fri - Jan 17, 2025
4:00pm

Deadlines:

Week 3 #

Monday, 2025-01-20 - Friday, 2025-01-24

Mon - Jan 20, 2025| Martin Luther King Jr. Day - No Classes, University Closed
Wed - Jan 22, 2025
04:30pm-05:45pm
Lecture 5: [snow day]
Wed - Jan 22, 2025|

Week 4 #

Monday, 2025-01-27 - Friday, 2025-01-31

Mon - Jan 27, 2025
04:30pm-05:45pm
Lecture 6: Cross-site request forgery, Server-side request forgery (A10)
Slides, Recording
Mon - Jan 27, 2025|
Mon - Jan 27, 2025
4:00pm

Deadlines:

Wed - Jan 29, 2025
04:30pm-05:45pm
Lecture 7: Other input validation vulnerabilities (A3), Security misconfiguration (A5)
Slides, Recording
Mentioned Resources:
Wed - Jan 29, 2025|

Week 5 #

Monday, 2025-02-03 - Friday, 2025-02-07

Mon - Feb 03, 2025
04:30pm-05:45pm
Lecture 8: Midterm review
Slides, Recording
Mentioned Resources:
Mon - Feb 03, 2025
4:00pm

Deadlines:

Wed - Feb 05, 2025
10:15am-11:30am

Midterm Exam 1 (4:30apm – 5:45pm) #

Week 6 #

Monday, 2025-02-10 - Friday, 2025-02-14

Mon - Feb 10, 2025
04:30pm-05:45pm
Lecture 9: Improper authentication (A7)
Slides, Recording
Mon - Feb 10, 2025|
Mon - Feb 10, 2025
4:00pm

Deadlines:

Tue - Feb 11, 2025| Wellness Day - No Classes
Wed - Feb 12, 2025
04:30pm-05:45pm
Lecture 10: Improper access control (A1), Security logging and monitoring failures (A9)
Slides, Recording
Wed - Feb 12, 2025|

Week 7 #

Monday, 2025-02-17 - Friday, 2025-02-21

Mon - Feb 17, 2025
04:30pm-05:45pm
Lecture 11: Insecure Design (A4)
Slides, Recording
Mentioned Resources:
Mon - Feb 17, 2025|
Mon - Feb 17, 2025
4:00pm

Deadlines:

Wed - Feb 19, 2025
04:30pm-05:45pm
Lecture 12: Improper data exposure / encryption (A2)
Slides, Recording
Wed - Feb 19, 2025|

Week 8 #

Monday, 2025-02-24 - Friday, 2025-02-28

Mon - Feb 24, 2025
04:30pm-05:45pm
Lecture 13: Dynamic Application Security Testing (DAST)
Slides, Recording
Mentioned Resources:
Mon - Feb 24, 2025|
Mon - Feb 24, 2025
4:00pm

Deadlines:

Wed - Feb 26, 2025
04:30pm-05:45pm
Lecture 14: Supply chain: Vulnerable dependencies (SCA) (A6)
Slides, Recording

Week 9 #

Monday, 2025-03-03 - Friday, 2025-03-07

Mon - Mar 03, 2025
04:30pm-05:45pm
Lecture 15: Midterm review
Slides, Recording
Mentioned Resources:
Mon - Mar 03, 2025
4:00pm

Deadlines:

Wed - Mar 05, 2025
10:15am-11:30am

Midterm Exam 2 (10:15am – 11:30am) #

Week 10 #

Monday, 2025-03-10 - Friday, 2025-03-14

Mon - Mar 10, 2025| Spring Break - No Classes, University Closed
Tue - Mar 11, 2025| Spring Break - No Classes, University Closed
Wed - Mar 12, 2025| Spring Break - No Classes, University Closed
Thu - Mar 13, 2025| Spring Break - No Classes, University Closed
Fri - Mar 14, 2025| Spring Break - No Classes, University Closed

Week 11 #

Monday, 2025-03-17 - Friday, 2025-03-21

Mon - Mar 17, 2025
04:30pm-05:45pm
Lecture 16: Security testing
Slides, Recording
Mentioned Resources:
Mon - Mar 17, 2025|
  • Project 1 P01 Deadline : Mon, Mar 24 - 4:00pm (Raleigh time) via Gradescope
Wed - Mar 19, 2025
04:30pm-05:45pm
Lecture 17: Static Application Security Testing
Slides, Recording
Mentioned Resources:

Week 12 #

Monday, 2025-03-24 - Friday, 2025-03-28

Mon - Mar 24, 2025
04:30pm-05:45pm
Lecture 18: Interactive Application Security Testing (IAST) .... NOT COVERED 2025
Slides, Recording
Mon - Mar 24, 2025|
  • Project 2 P02 Deadline : Wed, Apr 2 - 10:00pm (Raleigh time) via Gradescope
Mon - Mar 24, 2025
4:00pm

Deadline:

Wed - Mar 26, 2025
04:30pm-05:45pm
Lecture 19: Checked-Credentials
Slides, Recording
Mentioned Resources:

Week 13 #

Monday, 2025-03-31 - Friday, 2025-04-04

Mon - Mar 31, 2025
04:30pm-05:45pm
Lecture 20: Adversarial behavior
Slides, Recording
Mentioned Resources:
Mon - Mar 31, 2025|
Wed - Apr 02, 2025
04:30pm-05:45pm
Lecture 21: Attack and defense trees
Slides, Recording
Mentioned Resources:
Wed - Apr 02, 2025|
  • Project 3 P03 Deadline : Wed, Apr 16 - 4:00pm (Raleigh time) via Gradescope
Wed - Apr 02, 2025
4:00pm

Deadline:

Week 14 #

Monday, 2025-04-07 - Friday, 2025-04-11

Mon - Apr 07, 2025
04:30pm-05:45pm
Lecture 22: Threat modeling
Slides, Recording
Mentioned Resources:
Mon - Apr 07, 2025|
Wed - Apr 09, 2025
04:30pm-05:45pm
Lecture 23: LLMs and Security
Slides, Recording
Mentioned Resources:
Mon - Apr 07, 2025|

Week 15 #

Monday, 2025-04-14 - Friday, 2025-04-18

Mon - Apr 14, 2025
04:30pm-05:45pm
Lecture 24: Software bill of materials
Slides, Recording
Mentioned Resources:
Wed - Apr 16, 2025
04:30pm-05:45pm
Lecture 25: Class cancelled
Slides, Recording
Mentioned Resources:
Wed - Apr 16, 2025|
Wed - Apr 16, 2025
4:00pm

Deadline:

Week 16 #

Monday, 2025-04-21 - Friday, 2025-04-25

Mon - Apr 21, 2025
04:30pm-05:45pm
Lecture 26: Industry Panel and Review
Slides
Mentioned Resources:

Week 17 #

Monday, 2025-04-28 - Friday, 2025-05-02

Wed - Apr 30, 2025
3:30pm-6:00pm

Final Exam (3:30 - 6:00) #final #