Units:

12

Description:

The Web continues to grow in popularity as platform for retail transactions, financial services, and rapidly evolving forms of communication. It is becoming an increasingly attractive target for attackers who wish to compromise users' systems or steal data from other sites. Browser vendors must stay ahead of these attacks by providing features that support secure web applications. This course will study vulnerabilities in existing web browsers and the applications they render, as well as new technologies that enable web applications that were never before possible. The material will be largely based on current research problems, and students will be expected to criticize and improve existing defenses. Topics of study include (but are not limited to) browser encryption, JavaScript security, plug-in security, sandboxing, web mashups, and authentication. The course will involve an intensive group research project focusing on protocols/algorithms, vulnerabilities, and attacks as well as several individual homework and programming tasks. Groups will perform a sequence of cumulative tasks (literature review, analysis, simulation, design, implementation) to address aspects of their chosen topic, occasionally reporting their results to the class through brief presentations, leading to a final report.

Prerequisites: Graduate Standing or instructor permission. Previous experience with security, e.g., completing an Introduction to Security course. Working knowledge of programming is required and Web development knowledge is preferred.

Last Modified: 2024-06-28 10:16AM

Semesters offered:

• Fall 2024
• Fall 2023
• Spring 2021
• Spring 2020
• Spring 2019
• Spring 2018