Web Programming (Front-end)Sillabus

Fənn kodu

IFS-2220yn-EN

Kredit

6

Tələbənin iş yükü

2

Semestr

Yaz semestri

Akademik il

1

Fənnin tipi

Seçmə

Təhsil forması

Əyani

Tədris dili

Azərbaycan

Auditoriyadaxili saatlar

a) 30 hours – Lectures; b) 15 hours – Seminars; c) 30 hours – Laboratory sessions

Auditoriyadan kənar saatlar

a) 1 hour – Independent study; b) 1 hour – Consultation

The course “Web Programming (Front-end)” focuses on the fundamental principles and technologies used in the development of the client-side components of modern web applications. The course covers HTML, CSS, and JavaScript, the structure and semantics of web pages, styling and responsive design, interaction with interface elements, and handling of user events. It also introduces the fundamentals of DOM manipulation, interaction with web services and APIs, data validation, and the principles of developing interactive and responsive user interfaces. Particular attention is given to performance, usability, and basic principles of secure web application development.

• mühazirə
• laboratoriya işi
• seminar
• təqdimatlar
• interaktiv müzakirə

1. 1

   CLO 1: Explain the fundamental concepts, principles, stages, and methods of penetration testing, as well as the requirements for conducting penetration tests in a controlled virtual laboratory environment.

2. 2

   CLO 2: Configure a virtual laboratory and use Kali Linux, essential Linux command-line tools, and penetration testing tools to perform practical tasks within an authorized environment.

3. 3

   CLO 3: Apply information-gathering and open-source intelligence (OSINT) techniques, port scanning, and vulnerability discovery using appropriate tools, including Nmap, Netcraft, and Nessus.

4. 4

   CLO 4: Analyze network traffic and interactions between network nodes using Wireshark and apply network data analysis techniques in controlled penetration testing environments.

5. 5

   CLO 5: Apply basic vulnerability exploitation techniques, password-based attacks, client-side exploitation, social engineering, and post-exploitation analysis in an isolated educational environment.

6. 6

   CLO 6: Use tools and techniques for web application security testing, including the analysis of SQL injection and XPath injection vulnerabilities and the use of Burp Proxy, as well as identify and analyze related vulnerabilities.

7. 7

   CLO 7: Explain memory management principles and buffer overflow mechanisms, and analyze vulnerabilities associated with stack-based buffer overflows and Structured Exception Handler (SEH) overwrites in a controlled educational environment.

8. 8

   CLO 8: Apply fuzzing techniques, analyze software testing results, and use relevant capabilities of the Metasploit Framework for controlled security testing.

9. 9

   CLO 9: Explain the main attack vectors targeting mobile devices and apply specialized frameworks to conduct authorized security testing of smartphones.

10. 10

    CLO 10: Analyze penetration testing results, document identified vulnerabilities, assess their potential impact, and prepare a structured report containing recommendations for mitigating the identified security issues.

Mövzu əlavə edilməyib.

1. Georgia Weidman, Penetration Testing: A Hands-On Introduction to Hacking. No Starch Press, 2014, 531 pages.
2. Dafydd Stuttard, Marcus Pinto, The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws. Wiley, 2011, 914 pages.
3. Dafydd Stuttard, Marcus Pinto, The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws. Secure Planet LLC, 2018, 264 pages.