Web Systems Security

Learning Outcomes

Upon successful completion of this course, students are expected to be able to: Apply the principles and knowledge in web system security to create secure websites to function as what they are meant to despite being attacked by several known flaws; identify, define and analyse the problems and requirements appropriate to create secure web systems; comprehend and analyze the impact of web systems security on individuals, organizations and society, including ethical, legal, security and global policy issues.

Topics

This course prepares student to be technically knowledgeable on security issues that cause the websites to be defaced, out of service, or become a source of malware spread. Web security topics such as injection flaws, cross site scripting, broken authentication and session management, and improper error handling are discussed. Web security audit tools are introduced to aid students examine the HTTP headers and content that serve as the vulnerable communication media.

Prerequisite : CS216 – Web Programming