Secure Programming [CSCI 8245]

This is a special course I teach at the University of Georgia every Spring semester. This is a senior grad class. In this course, students will first learn about security threats of unsafe language and program analysis methods to identify software vulnerabilities. Later, the class will continue based on the fastest-growing memory-safe language (i.e. Rust) and explore how it guarantees memory, thread, and type safety besides some of the advanced features. Please, take a look at the syllabus for details. An expected class schedule can be found here.

Schedule

Weeks	Lecture
1	Introduction
2	Memory Corruption
2-3	Race Condition
3-4	Program Analysis
5	Introduction to Rust
5	Rust Basics
6	Ownership Model
7	Structs
7	Enums
8	Collections
9	File Management and Error Handling
10	Rust I/O Handling
10-11	Rust Functional Programming Features
12-13	Generics, Traits, and Lifetime
14	Concurrency
15	Crates and Modules
15	Is Rust OOP?
16	Smart Pointers
17	Advanced Features

Group Project

Title	Description
File Server
Group Chat
Network Simulator
Code Processor
Health Database

Assignments

Title	Deadline
Palindrome	Week 7
Conflict	Week 10
Bubble	Week 13
Deadlock	Week 15
Shortest	Week 17

Presentation

Title	Category
How Do Programmers Use Unsafe Rust?	L2
Is Rust Used Safely by Software Developers?	L1
Memory-Safety Challenge Considered Solved? An In-Depth Study with All Rust CVEs	L2
System Programming in Rust: Beyond Safety	L1
Towards Memory Safe Enclave Programming with Rust-SGX	L2
Sandcrust: Automatic Sandboxing of Unsafe Components in Rust	L1
RustBelt: securing the foundations of the rust programming language	L2
Exploring Rust for Unikernel Development	L1
Fuzzing the Rust Typechecker Using CLP (T)	L2
RusTEE: Developing Memory-Safe ARM TrustZone Applications	L1
Securing unsafe rust programs with XRust	L2