Schedule #

Disclaimer: Note that the schedule is subject to change as the semester evolves.

Deadlines

Projects (~ every 2 weeks): P01 P02 P03
Workshops (~ every class): W01 W02 W03 W04 W05 W06 W07 W08
Midterm 1: midterm1 (Wed, Mar 4 - 10:15am , in )
Midterm 2: midterm2 (Mon, Apr 20 - 10:15am , in )
Final exam: final (Wed, May 6 - 8:30am , in )

Week 1 #

Monday, 2026-01-12 - Friday, 2026-01-16

Mon - Jan 12, 2026| First day of classes

Mon - Jan 12, 2026

10:15am-11:30am

Lecture 1: Course Introduction

Slides

Mentioned Resources:

🌐 National Vulnerability Database (NVD)
🌐 OSV Database
🌐 Snyk Database
🌐 Common Vulnerabilities and Exposures (CVE)
🌐 Common Weakness Enumeration (CWE)
🌐 Common Vulnerability Scoring System (CVSS)

Wed - Jan 14, 2026

10:15am-11:30am

Lecture 2: Juiceshop, Developer Tools

Slides

Mentioned Resources:

Week 2 #

Monday, 2026-01-19 - Friday, 2026-01-23

Mon - Jan 19, 2026| Martin Luther King Jr. Day - No Classes, University Closed

Wed - Jan 21, 2026

10:15am-11:30am

Lecture 3: OWASP Top 10 overview, Injection (A5)

Slides

Mentioned Resources:

🌐 OWASP Top 10
🌐 OWASP Top 10 A5 Injection

Wed - Jan 21, 2026|

Workshop#01 - Injection W01 Deadline : Thu, Jan 29 - 10:00am (Raleigh time) via Gradescope

Week 3 #

Monday, 2026-01-26 - Friday, 2026-01-30

Mon - Jan 19, 2026| Snow Day - No Classes, University Closed

Wed - Jan 28, 2026

10:15am-11:30am

Lecture 4: Cross Site Scripting (A5) and Software and Data Integrity Failures (A8)

Slides

Mentioned Resources:

🌐 OWASP Top 10 A8 Software and Data Integrity

Wed - Jan 28, 2026

10:15am-11:30am

Lecture 5: Vulnerability Scoring & Rankings

Slides

Mentioned Resources:

Wed - Jan 28, 2026|

Workshop#02 - XSS W02 Deadline : Tue, Feb 3 - 10:00am (Raleigh time) via Gradescope

Thu - Jan 29, 2026

10:00am

Deadlines:

Workshop#01 - Injection #W01 via Gradescope

Week 4 #

Monday, 2026-02-02 - Friday, 2026-02-06

Mon - Feb 02, 2026

10:15am-11:30am

Lecture 6: Cross-site request forgery

Slides

Mentioned Resources:

Mon - Feb 02, 2026|

Workshop#03 - CSRF W03 Deadline : Mon, Feb 9 - 10:00am (Raleigh time) via Gradescope

Tue - Feb 03, 2026

10:00am

Deadlines:

Workshop#02 - XSS #W02 via Gradescope

Wed - Feb 04, 2026

10:15am-11:30am

Lecture 7: Security misconfiguration (A2) and Mishandling of Exceptional Conditions (A10)

Slides

Wed - Feb 04, 2026|

Workshop#04 - Other Input Validation W04 Deadline : Mon, Feb 16 - 10:00am (Raleigh time) via Gradescope

Week 5 #

Monday, 2026-02-09 - Friday, 2026-02-13

Mon - Feb 09, 2026

10:15am-11:30am

Lecture 8: Authentication Failures (A7)

Slides

Mon - Feb 09, 2026

10:00am

Deadlines:

Workshop#03 - CSRF #W03 via Gradescope

Wed - Feb 11, 2026

10:15am-11:30am

Lecture 9: Broken access control (A1), Security logging and monitoring failures (A9)

Slides

Week 6 #

Monday, 2026-02-16 - Friday, 2026-02-20

Mon - Feb 16, 2026

10:15am-11:30am

Lecture 10: Insecure Design (A6)

Slides

Mentioned Resources:

Mon - Feb 16, 2026|

Workshop#05 - Insufficient Authentication and Access Control W05 Deadline : Mon, Feb 23 - 10:00am (Raleigh time) via Gradescope

Mon - Feb 16, 2026

10:00am

Deadlines:

Workshop#04 - Other Input Validation #W04 via Gradescope

Tue - Feb 17, 2026| Wellness Day - No Classes

Wed - Feb 18, 2026

10:15am-11:30am

Lecture 11: Cryptographic Failures (A04)

Slides

Mentioned Resources:

🌐 OWASP Top 10: A4 Cryptographic Failures

Wed - Feb 18, 2026|

Week 7 #

Monday, 2026-02-23 - Friday, 2026-02-27

Mon - Feb 23, 2026

10:15am-11:30am

Lecture 12: Software Supply Chain Failures (A03); Software Composition Analysis (SCA)

Slides

Mentioned Resources:

🌐 Sonatype State of Supply Chain Security 2026
🌐 OWASP Dependency Check
🌐 OWASP SCVS
🌐 2025 midterm (some questions may not apply)
🌐 Study guide

Mon - Feb 23, 2026|

Mon - Feb 23, 2026

10:00am

Deadlines:

Workshop#05 - Insufficient Authentication and Access Control #W05 via Gradescope

Mon - Feb 23, 2026|

Workshop#06 - Sensitive Data Exposure W06 Deadline : Mon, Mar 2 - 4:00pm (Raleigh time) via Gradescope

Wed - Feb 25, 2026

10:15am-11:30am

Lecture 13: Dynamic Application Security Testing (DAST)

Slides

Mentioned Resources:

🌐 OWASP ZAP
🌐 Supportive guides ZAPiing the OWASP Top 10 (2021)

Week 8 #

Monday, 2026-03-02 - Friday, 2026-03-06

Mon - Mar 02, 2026

10:15am-11:30am

Lecture 14: Midterm review

Slides

Mon - Mar 02, 2026|

Workshop#07 - ZAP W07 Deadline : Mon, Mar 9 - 4:00pm (Raleigh time) via Gradescope
Workshop#08 - Dependency Checker W08 Deadline : Mon, Mar 9 - 4:00pm (Raleigh time) via Gradescope

Mon - Mar 02, 2026

10:00am

Deadlines:

Workshop#06 - Sensitive Data Exposure #W06 via Gradescope

Wed - Mar 04, 2026

10:15am-11:30am

Midterm Exam 1 (10:15am – 11:30am) #midterm1 #

Week 9 #

Monday, 2026-03-09 - Friday, 2026-03-13

Mon - Mar 09, 2026

10:15am-11:30am

Lecture 15: Security testing

Slides

Mentioned Resources:

Mon - Mar 09, 2026

10:00am

Deadlines:

Workshop#07 - ZAP #W07 via Gradescope
Workshop#08 - Dependency Checker #W08 via Gradescope

Wed - Mar 11, 2026

10:15am-11:30am

Lecture 16: Static Application Security Testing (SAST)

Slides

Mentioned Resources:

Week 10 #

Monday, 2026-03-16 - Friday, 2026-03-20

Mon - Mar 16, 2026| Spring Break - No Classes, University Closed

Tue - Mar 17, 2026| Spring Break - No Classes, University Closed

Wed - Mar 18, 2026| Spring Break - No Classes, University Closed

Thu - Mar 19, 2026| Spring Break - No Classes, University Closed

Fri - Mar 20, 2026| Spring Break - No Classes, University Closed

Week 11 #

Monday, 2026-03-23 - Friday, 2026-03-27

Mon - Mar 23, 2026

10:15am-11:30am

Lecture 17: Checked-Credentials

Slides

Mentioned Resources:

Mon - Mar 23, 2026|

Project 1 P01 Deadline : Mon, Mar 30 - 10:00am (Raleigh time) via Gradescope

Wed - Mar 25, 2026

10:15am-11:30am

Lecture 18: Adversarial behavior

Slides

Mentioned Resources:

Week 12 #

Monday, 2026-03-30 - Friday, 2026-04-03

Mon - Mar 30, 2026

10:15am-11:30am

Lecture 19: Attack and defense trees

Slides

Mentioned Resources:

🌐 Using attack trees to understand cyber security risk

Mon - Mar 30, 2026|

Project 2 P02 Deadline : Wed, Apr 8 - 10:00am (Raleigh time) via Gradescope

Mon - Mar 30, 2026

10:00am

Deadline:

Project 1 #P01 via Gradescope

Wed - Apr 01, 2026

10:15am-11:30am

Lecture 20: Threat modeling

Slides

Mentioned Resources:

Week 13 #

Monday, 2026-04-06 - Friday, 2026-04-10

Mon - Apr 06, 2026

10:15am-11:30am

Lecture 21: Secure AI/ML- Driven Software Development

Slides

Mentioned Resources:

Mon - Apr 06, 2026|

Wed - Apr 08, 2026

10:15am-11:30am

Lecture 22: Malware Detection with LLMs

Slides

Mentioned Resources:

🌐 LLM Workshop

Wed - Apr 08, 2026|

Project 3 P03 Deadline : Wed, Apr 22 - 10:00am (Raleigh time) via Gradescope

Wed - Apr 08, 2026

10:00am

Deadline:

Project 2 #P02 via Gradescope

Week 14 #

Monday, 2026-04-13 - Friday, 2026-04-17

Mon - Apr 13, 2026

10:15am-11:30am

Lecture 23: Software bill of materials

Slides

Mentioned Resources:

🗎 Software Bill of Materials Exercise

Mon - Apr 13, 2026|

Wed - Apr 15, 2026

10:15am-11:30am

Lecture 24: Midterm review

Mentioned Resources:

🌐 Study Guide
🌐 Old FINAL exam

Wed - Apr 15, 2026|

Week 15 #

Monday, 2026-04-20 - Friday, 2026-04-24

Mon - Apr 20, 2026

10:15am-11:30am

Midterm Exam 2 (10:15am – 11:30am) #midterm2 #

Wed - Apr 22, 2026

10:15am-11:30am

Lecture 25: Software Assurance Maturity Models

Slides

Mentioned Resources:

Wed - Apr 22, 2026|

Wed - Apr 22, 2026

10:00am

Deadline:

Project 3 #P03 via Gradescope

Week 16 #

Monday, 2026-04-27 - Friday, 2026-05-01

Mon - Apr 27, 2026

10:15am-11:30am

Lecture 26: Industry Panel and Review

Slides

Mentioned Resources:

Week 17 #

Monday, 2026-05-04 - Friday, 2026-05-08

Wed - May 06, 2026

8:30am -- 11:00am

CSC 415

This Site

Quick Links

Schedule #

Week 1 #

Week 2 #

Week 3 #

Week 4 #

Week 5 #

Week 6 #

Week 7 #

Week 8 #

Midterm Exam 1 (10:15am – 11:30am) #midterm1 #

Week 9 #

Week 10 #

Week 11 #

Week 12 #

Week 13 #

Week 14 #

Week 15 #

Midterm Exam 2 (10:15am – 11:30am) #midterm2 #

Week 16 #

Week 17 #

Final Exam (08:00am – 11:00am) #final #