Subject · Information security

Web programming (front-end)

IFS-2220yn-EN6 creditsSpring semesterElective1

About this subject

Credits

6

Workload

2hours

Semester

Spring

Academic year

1

Description

The course “web programming (front-end)” focuses on the fundamental principles and technologies used in the development of the client-side components of modern web applications. the course covers html, css, and javascript, the structure and semantics of web pages, styling and responsive design, interaction with interface elements, and handling of user events. it also introduces the fundamentals of DOM manipulation, interaction with web services and apis, data validation, and the principles of developing interactive and responsive user interfaces. particular attention is given to performance, usability, and basic principles of secure web application development.

Course learning outcomes

  1. CLO 1: Explain the fundamental concepts, principles, stages, and methods of penetration testing, as well as the requirements for conducting penetration tests in a controlled virtual laboratory environment.

  2. CLO 2: Configure a virtual laboratory and use kali linux, essential linux command-line tools, and penetration testing tools to perform practical tasks within an authorized environment.

  3. CLO 3: Apply information-gathering and open-source intelligence (osint) techniques, port scanning, and vulnerability discovery using appropriate tools, including nmap, netcraft, and nessus.

  4. CLO 4: Analyze network traffic and interactions between network nodes using wireshark and apply network data analysis techniques in controlled penetration testing environments.

  5. CLO 5: Apply basic vulnerability exploitation techniques, password-based attacks, client-side exploitation, social engineering, and post-exploitation analysis in an isolated educational environment.

  6. CLO 6: Use tools and techniques for web application security testing, including the analysis of SQL injection and xpath injection vulnerabilities and the use of burp proxy, as well as identify and analyze related vulnerabilities.

  7. CLO 7: Explain memory management principles and buffer overflow mechanisms, and analyze vulnerabilities associated with stack-based buffer overflows and structured exception handler (seh) overwrites in a controlled educational environment.

  8. CLO 8: Apply fuzzing techniques, analyze software testing results, and use relevant capabilities of the metasploit framework for controlled security testing.

  9. CLO 9: Explain the main attack vectors targeting mobile devices and apply specialized frameworks to conduct authorized security testing of smartphones.

  10. CLO 10: Analyze penetration testing results, document identified vulnerabilities, assess their potential impact, and prepare a structured report containing recommendations for mitigating the identified security issues.