learning objectives: * define software security * explain three trends (trinity of trouble) that impact software security * define and give examples of defect, bug, flaw, risk * list and explain the three goals of security * define threat, attack, attacker, asset * list and explain the four classes of threats * practice skimming academic literature * identify academic papers in the field of software security * demonstrate the use of encrypted email (security software) in-class activities: * attendance: swipr * number game ice breaker + winner: cason * syllabus overview * muddy points form: www.yellkey.com/myself --> https://forms.gle/7fjnqK6nXGf4C8Q87 * discussion: rules and expectations * Security Basics extra: * watch and review any software security video - post title, link, review on Piazza assignments / outside-of-class activities: * propose rules and expectations: https://forms.gle/gYWfk63FeXRjMv7j8 * read SSBSI Chapter 1: Defining a Discipline * review SecurityBasics.pptx slides * watch Security 101: An introduction to software security - Allen Holub (https://www.youtube.com/watch?v=UPgoEFKr08E) * HW 0 (due 8am 20 jan) * 489 Paper Report (due 8am 27 Apr) - RemindMe! 17 Feb "tell Dr. Ritchey which topic" * 713 Mini Annotation (due 8am 27 Apr) - RemindMe! 17 Feb "tell Dr. Ritchey which paper"