IMT3501 - Software Security


Examination arrangement

Examination arrangement: Written examination
Grade: Letters

Evaluation form Weighting Duration Examination aids Grade deviation
Written examination 100/100 3 hours E

Course content

- Secure software development lifecycle
- Low level and application related vulnerability analysis
- Security requirement and secure design
- Secure coding practices and software inspection
- Security testing

Learning outcome

-The students have basic knowledge on how software can be created and maintained with security in mind, i.e. deviation from expected functionality owing to interaction with an adversary. 
-They understand attack patterns, e.g. buffer overflows, format string
 problems, command injection and cross-site scripting.
-The students have an overview of existing techniques, classes of tools and the methods used in software development today.

-Students can apply their knowledge to problem cases in an industrial or research setting. 
-They are able to identify potential threats and vulnerabilities early in a program's lifecycle and apply measures that prevent or reduce vulnerabilities in software.

General competence
-The students succeed in presenting their analyses and approaches to other developers, superiors and customers.

Learning methods and activities

-Laboratory exercises
-Compulsory assignments

Coursework requirements:
All obligatory exercises must be approved.

Compulsory assignments

  • Approved exercises

Further on evaluation

Re-sit examination in August.

Specific conditions

Exam registration requires that class registration is approved in the same semester. Compulsory activities from previous semester may be approved by the department.

Admission to a programme of study is required:
Computer Science (BIDATA)
IT Operations and Information Security (BITSEC)
Information Security (BIS)
Network and System Administration (BDR)
Programming (BPROG)

Course materials

Paul, M. (2013). Official (ISC) 2 Guide to the CSSLP. CRC Press.

More on the course



Version: 1
Credits:  10.0 SP
Study level: Third-year courses, level III


Term no.: 1
Teaching semester:  AUTUMN 2020

Language of instruction: English

Location: Gjøvik

Subject area(s)


Contact information
Course coordinator:

Department with academic responsibility
Department of Information Security and Communication Technology



Examination arrangement: Written examination

Term Status code Evaluation form Weighting Examination aids Date Time Digital exam Room *
Autumn ORD Written examination 100/100 E INSPERA
Room Building Number of candidates
  • * The location (room) for a written examination is published 3 days before examination date. If more than one room is listed, you will find your room at Studentweb.

For more information regarding registration for examination and examination procedures, see "Innsida - Exams"

More on examinations at NTNU