Course Syllabus

Course Information：

Year-Semester Course Number Course Name Phase Credits Hours Required/Elective Instructor Class Student NO. Withdraw Note

Fall Semester
Year 2025 347345 Software security and reverse engineering 1 3.0 3 ★ Chen, Shiang-Jiun 4CSIE4 30 0 資工四、資工所和電資國際班合開

Year-Semester	Course Number	Course Name	Phase	Credits	Hours	Required/Elective	Instructor	Class	Student NO.	Withdraw	Note
Fall Semester Year 2025	347345	Software security and reverse engineering	1	3.0	3	★	Chen, Shiang-Jiun	4CSIE4	30	0	資工四、資工所和電資國際班合開

Course Plan：

Instructor Chen, Shiang-Jiun　Office Hours

Email annette@ntut.edu.tw

Last Updated 2025-05-26 08:09:11

Course Objective 本課程除了介紹軟體開發架構及安全保護的原理之外，更著重在軟體開發平台的實際操作使用，例如:iOS或Android的開發平台等，並以國網中心所建置的CDX雲端資安攻防平台進行實作分析與演練，讓學生能更了解技術原理的實際應用情境。課程內容包含：軟體開發流程 ●軟體潛在威脅 ●惡意軟體偵測 (malware detection) ●網頁程式安全 (Web application security) ●行動應用軟體安全 (Mobile App security): iOS, Android ●App漏洞與弱點 (Vulnerabilities in Apps) ●App 安全檢測 (Security testing of Apps): static, dynamic ●逆向工程 (reverse engineering) 英文概述 English Description The course aims to introduce principles of software development architecture and associated security technologies. The course also focuses on discussing security issues of actual operations on software development platforms, such as iOS or Android platforms, etc. Students will use CDX cloud platform to exercise practical analysis regarding security attack and defense events, and students are expected to possess better understand of practical applications of security issues for software development. Course contents including: ●Software developing procedure ●Potential threats for software development ●Malware detection ●Web application security ●Mobile App security: iOS, Android ●Vulnerabilities in Apps ●App Security testing: static, dynamic ●Reverse engineering 11/5-6 no class make-up 10/15 11/12 12/10 8:10-9:00

Course Schedule wk1-2: Introudction of Software Secutiy Development Life Cycle wk3: Potential threats for software development wk4: Malware detection wk5: lab wk6: Web application security wk7: Mobile App security: iOS, Android wk8: Vulnerabilities in Apps wk9: no class (10/15 11/12 12/10 make up 8:10-9:00) wk10: Lab wk11-13: Reverse engineering wk14-15: Lab wk16-wk18: Project presentaion

Evaluation and grading policy Attendance: 10% Individual Project: 30% Team Project: 40% Presentation: 20%

Materials All right reserved. Do not reproduce without permission.

Foreign-language textbooks:No
Class material: Handout Reference: NIST 800-160 Secret Reverse Engineering Eldad Eilam

The access to curricular consultation office hour Tues. 12:00-18:00 or by appointment
office location: Hung-Yu Research Tech Building Room 1627

Announce will show on zuvio or ischool

The course corresponds to the SDGs SDG4：優質教育（Quality Education）

Does the course incorporate AI ● 使用生成式AI作為教學過程的輔助工具（Use generative AI tools as an aid to the teaching process）
● 鼓勵學生使用生成式AI工具（Encourage students to use generative AI tools）

Expanding teaching and resources

Note
　

Instructor	Chen, Shiang-Jiun　Office Hours
Email	annette@ntut.edu.tw
Last Updated	2025-05-26 08:09:11
Course Objective	本課程除了介紹軟體開發架構及安全保護的原理之外，更著重在軟體開發平台的實際操作使用，例如:iOS或Android的開發平台等，並以國網中心所建置的CDX雲端資安攻防平台進行實作分析與演練，讓學生能更了解技術原理的實際應用情境。課程內容包含：軟體開發流程 ●軟體潛在威脅 ●惡意軟體偵測 (malware detection) ●網頁程式安全 (Web application security) ●行動應用軟體安全 (Mobile App security): iOS, Android ●App漏洞與弱點 (Vulnerabilities in Apps) ●App 安全檢測 (Security testing of Apps): static, dynamic ●逆向工程 (reverse engineering) 英文概述 English Description The course aims to introduce principles of software development architecture and associated security technologies. The course also focuses on discussing security issues of actual operations on software development platforms, such as iOS or Android platforms, etc. Students will use CDX cloud platform to exercise practical analysis regarding security attack and defense events, and students are expected to possess better understand of practical applications of security issues for software development. Course contents including: ●Software developing procedure ●Potential threats for software development ●Malware detection ●Web application security ●Mobile App security: iOS, Android ●Vulnerabilities in Apps ●App Security testing: static, dynamic ●Reverse engineering 11/5-6 no class make-up 10/15 11/12 12/10 8:10-9:00
Course Schedule	wk1-2: Introudction of Software Secutiy Development Life Cycle wk3: Potential threats for software development wk4: Malware detection wk5: lab wk6: Web application security wk7: Mobile App security: iOS, Android wk8: Vulnerabilities in Apps wk9: no class (10/15 11/12 12/10 make up 8:10-9:00) wk10: Lab wk11-13: Reverse engineering wk14-15: Lab wk16-wk18: Project presentaion
Evaluation and grading policy	Attendance: 10% Individual Project: 30% Team Project: 40% Presentation: 20%
Materials	All right reserved. Do not reproduce without permission. Foreign-language textbooks:No Class material: Handout Reference: NIST 800-160 Secret Reverse Engineering Eldad Eilam
The access to curricular consultation	office hour Tues. 12:00-18:00 or by appointment office location: Hung-Yu Research Tech Building Room 1627 Announce will show on zuvio or ischool
The course corresponds to the SDGs	SDG4：優質教育（Quality Education）
Does the course incorporate AI	● 使用生成式AI作為教學過程的輔助工具（Use generative AI tools as an aid to the teaching process） ● 鼓勵學生使用生成式AI工具（Encourage students to use generative AI tools）
Expanding teaching and resources
Note