# COMP 5710/6710 
> MWF, 10:00-10:50 AM CST, SHELBY 1120, Fall 2023 

## Instructor 

> Akond Rahman, PhD 

> Office hours: Monday, 9:00-10:00 AM CST , Shelby Center 3104 

> akond@auburn.edu 

> Web: https://akondrahman.github.io/ 




## Materials 

> Required Textbook: 
- None. 

> Recommended Textbook:  
- Software Security: Building Security In, Gary McGraw, Addison-Wesley.    
- Software Engineering at Google: Lessons Learned from Programming Over Time, Hyrum Wright, Titus Winters, and Tom Manshreck, Oreilly.    



## Schedule 


| Date    |  Schedule                                                     |
|---------|---------------------------------------------------------------|
| Aug 16  | Introduction                                                  |
| Aug 18  | Introductions to CMMI                                         |
| Aug 21  | Software Process - Waterfall                                  |
| Aug 23  | Software Process - Scrum                                      |
| Aug 25  | Behavior-driven Development                                   |
| Aug 28  | Requirements Validation                                       |
| Aug 30  | Requirements Validation (Workshop)                            |
| Sep 01  | Configuration Management                                      |
| Sep 06  | Resilient Automated Configuration (Workshop with SLI-KUBE)    |
| Sep 08  | Resilient Configuration Management (Workshop with CUE)        |
| Sep 11  | Automated Program Analysis (Tool Usage)                       |
| Sep 13  | Automated Program Analysis (Tool Usage - Workshop)            |
| Sep 15  | Automated Program Analysis (Information Flow)                 |
| Sep 18  | Automated Program Analysis (Information Flow - Workshop)      |
| Sep 20  | Event-based Scanning                                          |
| Sep 22  | Event-based Scanning (Workshop)                               |
| Sep 25  | Resilient Integration                                         |
| Sep 27  | Resilient Integration    (Workshop)                           |
| Sep 29  | SQA Basics                                                    |  
| Oct 02  | Project debriefing                                            |                                             
| Oct 04  | Software Forensics                                            |                 
| Oct 06  | Recap for midterm                                             |
| Oct 09  | Midterm                                                       |
| Oct 11  | Software Forensics (Workshop)                                 |
| Oct 13  | Software Testing Overview                                     |
| Oct 16  | Test-driven Development                                       |
| Oct 18  | Testing Metrics                                               |
| Oct 20  | Software Fuzzing and Chaos Engineering                        |
| Oct 23  | Software Fuzzing (Workshop)                                   |     
| Oct 25  | Review of Graphs                                              |
| Oct 27  | Structural Testing                                            |
| Oct 30  | Functional Testing                                            |
| Nov 01  | Combinatorial Interaction Testing                             |
| Nov 03  | Project Updates                                               |
| Nov 06  | Concolic Testing                                              |
| Nov 08  | Concolic Testing                                              |
| Nov 10  | Software Supply Chain - Secret Management                     |
| Nov 13  | Software Supply Chain - Secret Management   (Workshop)        |
| Nov 15  | Software Supply Chain - Secure Software Development Lifecycle |
| Nov 17  | Software Supply Chain - Development and Maintenance Activities|
| Nov 20  | **Thanksgiving Break - No Classes**                           |
| Nov 22  | **Thanksgiving Break - No Classes**                           |
| Nov 24  | **Thanksgiving Break - No Classes**                           |
| Nov 27  | Software Supply Chain - Dependency Management                 |
| Nov 29  | Software Supply Chain - Insecure Coding                       |
| Dec 01  | Final Exam Review (`Last Day of Classes`)                     |
| Dec 07  | **Final Exam (in class and online, 8:00 -10:00 AM CST)**      |

 


## Grading scale: 
  - A: 90-100 
  - B: 80-89 
  - C: 70–79 
  - D: 60–69
  - F: less than 59



