Web Development & Security

SEC2203 Databases Administration & Security

4 hours One requisite

1 Web Application Technologies: HTTP Protocol, Encoding Schemes, Web Application Architectures, AJAX, XML and JSON

2 Client-Side Controls

3 Server-Side Controls

4 Authentication

5 Session Management

6 Access Controls

7 Input-Based Vulnerabilities: SQL Injection, Blind SQL Injection, Cross-Site Scripting and Cross-Site Request Forgery

8 Function-Specific Input Vulnerabilities

9 JavaScript and Cookies Attack

10 Attacking Application Logic

11 Application Server Vulnerabilities

12 Shared Hosting Vulnerabilities

13 Recent Attack Trends

1.1 Mapped to: K1

Recognize common Web application technologies and their security issues

Teaching Strategy Course lectures, project

Assessment Methods Quizzes, Midterm Exam, Final Exam

1.2 Mapped to: K1

Identify common web vulnerabilities (e.g., SQL injection, XSS, CSRF).

Teaching Strategy Course lectures, lab exercises, project

Assessment Methods Quizzes, Midterm Exam, Final Exam

2.1 Mapped to: S2

Develop secure web applications using basic web technologies.

Teaching Strategy Lab coursework Project

Assessment Methods Quizzes, Midterm Exam, Final Exam, project

2.2 Mapped to: S6

Demonstrate the ability to identify, analyze, and mitigate common web application vulnerabilities

Teaching Strategy Lab coursework Project

Assessment Methods Quizzes, Midterm Exam, Final Exam, project

3.1 Mapped to: V1

Demonstrate an understanding of the ethical and legal implications of web security.

Teaching Strategy Project

Assessment Methods Project

Welcome