CSC 405 Computer Security #


This is the course website for the Spring 2027 offering of CSC 405 Computer Security at North Carolina State University (NC State).

An introduction to information security and management, covering security risks, vulnerabilities, attacks, and defenses, and confidentiality, integrity, and availability for hardware, software, and data.

Course NameComputer Security
Course NumberCSC 405
SemesterSpring 2027
FormatIn-person, recorded
Credits3
Meeting TimesTue, Thu 8:30am–9:45am
Meeting LocationFitts-Woolard Hall 2336
InstructorDominik Wermke

Course Overview #

Basic concepts and techniques in information security and management such as risks and vulnerabilities, applied cryptography, program security, malicious software, authentication, access control, operating systems security, multilevel security, trusted operating systems, database security, inference control, physical security, and system assurance and evaluation. Coverage of high-level concepts such as confidentiality, integrity, and availability applied to hardware, software, and data.

Topic List #

  • Web Security
  • Web Security – SQL Injections
  • Web Security – XSS
  • ClickJacking & EAR
  • Browser Extensions
  • Evasive web-based malware
  • Shellcode
  • Linux Security
  • Reverse Engineering
  • Control-flow hijack attacks
  • Stack Canaries & ASLR
  • Return-into-libc & ROP
  • Control-flow integrity

Outcomes #

By the end of this course, students will be able to:

  • Explain software and web vulnerabilities and implement attacks against them
  • Understand what defense mechanisms exist against these attacks, how they work and why some of them fail against the latest attacks
  • Describe the methods and motivation of Internet malware and the motivations behind these attacks
  • Design systems and software with security in mind

Staff #

Prof. Dr. Dominik Wermke
RoleInstructor
Emaildwermke@ncsu.edu
Webhttps://dwermke.com
https://www.csc.ncsu.edu/people/dwermke