FIT2173 Software security
Faculty of Information Technology
FIT2173 Software security is a level 2, 6-credit-point, undergraduate unit from the Faculty of Information Technology, offered in 2026 in Semester 1 at Clayton. It needs (ENG1014 and ENG1013); or (FIT1053 or FIT1045) and unlocks 3 units, leading on to 4 units in all.
- Credit points
- 6
- Offered in 2026
- Semester 1
- Clayton
- Assessment
- No exam
- 3 tasks
- Workload
- 144 hours
- per semester
This is the 2026 handbook entry. See the 2027 entry.
Reviews
No reviews yetNo reviews yet. Be the first to review FIT2173.
Requisites
Before FIT2173
Prerequisites
Pass these before you enrol.
Prohibitions
You can't enrol if you have passed any of these.
After FIT2173
3 units list FIT2173 as a prerequisite or corequisite.
Equivalent units
The same content under another code. Only one of them counts.
Overview
This unit aims to introduce secure software development issues from the design stage, through to the implementation, testing and deployment stages. Topics covered in this unit include the secure software development life cycle, secure software design principles, threat evaluation models, secure coding and development practices, software security testing, deployment and maintenance. You are provided with a range of practical exercises and tasks to reinforce your skills including: identification of security bugs in programs written in different programming languages, design, implementation, and testing of secure concurrent and networked applications and identification of vulnerabilities in networked and mobile/wireless applications.
Offerings in 2026
| Teaching period | Campus | Mode |
|---|---|---|
| First semester | Clayton | On campus |
Assessment
- Assignment 1Portfolio30%
- Assignment 2Portfolio35%
- In-Class TestQuiz / Test35%
Assessment details may change. Please refer to the assessment information in Moodle closer to the start of the teaching period.
Learning outcomes
When you finish this unit, you should be able to:
- 1
Understand the fundamentals of software security.
- 2
Model the possible software vulnerabilities and threats for a given application system
- 3
Apply a wide range of tools and technologies to evaluate software vulnerabilities.
- 4
Apply appropriate methods for the design and realisation of secure software for memory exploits and web applications security.
- 5
Analyse and evaluate security properties of concurrent and networked applications.
- 6
Discuss and evaluate the significance of various software security weaknesses.
- 7
Describe and select mitigation strategies for common vulnerabilities and attacks.
- 8Investigate, implement and exploit security vulnerabilities in a lab environment.
Workload and teaching
- Laboratories24 hours
- Seminars24 hours
- Teaching approachActive learning
- Teaching approachProblem-based learning
Minimum total expected workload to achieve the learning outcomes for this unit is 144 hours per semester typically comprising a mixture of scheduled online and face to face learning activities and independent study. Independent study may include associated reading and preparation for scheduled teaching activities. There will be around 2-hours per week asynchronous material, including videos, articles, etc., over 12 weeks - this will be created on Moodle.
Where it fits
FIT2173 is part of 4 areas of study in the 2026 handbook.
Contacts
- Unit Coordinators
- Zahra Mirzamomen
- Chief Examiners
- Dr Xiaoning Du
Common questions
What are the prerequisites for FIT2173?
You need (ENG1014 and ENG1013); or (FIT1053 or FIT1045) before you enrol.
What can I take after FIT2173?
FIT2173 is a prerequisite or corequisite for 3 units, including FIT3168, FIT3186 and FIT3188. Those lead on to 4 units in all.
When is FIT2173 offered?
In 2026, FIT2173 runs in Semester 1 at Clayton.
How much work is FIT2173?
The handbook expects about 144 hours of study across the semester. No students have rated its difficulty yet.
Does FIT2173 have an exam?
No. FIT2173 has 3 assessment tasks and no exam.
Which majors and minors include FIT2173?
FIT2173 is part of Applied cybersecurity, Cybersecurity and Software engineering.