Skip to main content

Security Engineering Specialization Project

Harden a non-trivial networked system and its delivery pipeline. Begin with assets, actors, trust boundaries, abuse cases, and risk-ranked security requirements.

Required Evidence​

  1. Threat model and trust-boundary diagram.
  2. Misuse cases and versioned security requirements.
  3. ASVS-based verification matrix with automated and manual evidence.
  4. Fuzzing, adversarial, or exploit-reproduction report.
  5. SBOM, signed artifact, and verifiable provenance.
  6. Vulnerability triage and remediation log.
  7. Detection rules, alert evidence, and incident exercise.
  8. Residual-risk and coordinated-disclosure statements.
  9. Independent review and remediation response.
  10. Public-safe case study and 20-minute oral defense.

AI-Use Declaration​

Record any AI assistance used for threat generation, code review, test generation, or report writing. Treat generated findings as untrusted until reproduced.