Razvan Dragoi Undergraduate Dissertation 2016/17

Building an Intentionally Vulnerable Virtual Machine for Teaching

Supervised by A.Brucker

Abstract

This piece is written to explain the process of creating a virtual machine environmentwhich lecturers can use within the university to teach and demonstrate the importance ofsecurity in programming. The main issues address are the top three web vulnerabilities ascategorised by OWASP. The approach towards teaching is using Static and Dynamic Codeanalysers, as well as penetration testing. In doing so, students are to learn the best secureprogramming practices to implement during the Software Development Life Cycle.