Software Security Lecture 12 Fang Yu Dept. of MIS, National Chengchi University Spring 2011

Announcement  In the following weeks, please work hard on your final project (50% on your final grade)  Feel free to stop by my office if you would like to discuss it with me  Project presentation/tool demonstration  Prepare an hour presentation to summarize your project  5/31 : WebGoat, PCL  6/7: Namp, Stranger  Final report (~10 pages) and system/code is due on 6/14

Outline  I will also introduce to you our tool “Stranger”  We still have several student presentations:  Static Detection of Cross-site Scripting Vulnerabilities (by Juliette Lessing)  Tool presentation: Sheng-Yi for Skipfish 