I'm happy to announce that in 2013 we'll be offering three different classes. You can get a high level overview here, and a detailed syllabus by sending a mail to email@example.com*. In summary, they are:
- C & C++ Auditing for Professionals: Strategy, Tactics & Techniques (5 days)
- Binary Auditing for Professionals: Strategy, Tactics & Techniques (5 days)
- SMT Solvers, Static Analysis, and Advanced Tool Development (4 days)
I'm looking forward to teaching them all, but out of the three I'm most excited about the last. I think it's a fairly unique class and should give students a solid introduction the more useful research topics in program analysis, as well as hands-on experience in developing implementations of the various algorithms covered. We'll also spend time discussing some of the larger problems that still exist when trying to integrate this research into tools for RE and bug finding.
The other two are also designed to take a slightly different approach to teaching code auditing. Instead of just focusing on enumerating bug categories, the content includes quite a bit of material on actually organising yourself during an audit, prioritising target components for review, and developing good habits to ensure reliable and repeatable results.
On the less interesting side of things, i.e. administrative details, we're currently only offering the classes to private organisations and government clients. If you'd like to enquire about booking a class, or to receive a more detailed syllabus, send a mail to firstname.lastname@example.org. That said, we are considering putting on an open class in either the UK or the US at some point next year. If you're interested, send a mail to the same address mentioning which class(es) you'd be interested in taking, and which country. If the various moons align, we will probably hold that class during the summer of next year.
- Sean (@seanhn)
* As mentioned above, we're currently only offering the classes to private organisations and government clients.