Web Security

Description

The course “Web Security” introduces the fundamental principles, methods, and technologies used to secure web applications and web services. It covers web application architecture, HTTP/HTTPS protocols, authentication and authorization mechanisms, session management, access control, and protection of user data. Students examine common web application vulnerabilities, including SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), access control vulnerabilities, and other threats, as well as methods for their identification, analysis, and prevention. Particular attention is given to secure web application development, server-side and client-side protection, encryption mechanisms, secure configuration, and security testing of web systems.

Course learning outcomes

1. 1

   CLO 1: Explain the principles of web browser operation and the fundamental principles of designing, developing, and operating web applications.

2. 2

   CLO 2: Develop secure web pages using modern technologies and demonstrate knowledge of html, css, and javascript.

3. 3

   CLO 3: Explain the principles of the HTTP protocol and understand the purpose and operation of ssl/tls certificates and their role in securing web pages and communications.

4. 4

   CLO 4: Describe the nature and main types of attacks targeting websites and web applications.

5. 5

   CLO 5: Explain the principles of web services and apis, including REST and graphql.

6. 6

   CLO 6: Identify common vulnerabilities presented in the OWASP top 10 and apply appropriate mechanisms and security practices to prevent and mitigate them.