Carnegie Mellon University

Electrical and Computer Engineering

College of Engineering

Course Information

18-636SV: Browser Security




The Web continues to grow in popularity as platform for retail transactions, financial services, and rapidly evolving forms of communication. It is becoming an increasingly attractive target for attackers who wish to compromise users' systems or steal data from other sites. Browser vendors must stay ahead of these attacks by providing features that support secure web applications. This course will study vulnerabilities in existing web browsers and the applications they render, as well as new technologies that enable web applications that were never before possible. The material will be largely based on current research problems, and students will be expected to criticize and improve existing defenses. Topics of study include (but are not limited to) browser encryption, JavaScript security, plug-in security, sandboxing, web mashups, and authentication. The course will involve an intensive group research project focusing on protocols/algorithms, vulnerabilities, and attacks as well as several individual homework and programming tasks. Groups will perform a sequence of cumulative tasks (literature review, analysis, simulation, design, implementation) to address aspects of their chosen topic, occasionally reporting their results to the class through brief presentations, leading to a final report.

Cross-listed with 14828. ECE students should only register for 18-636.

In Spring 2019 this course is broadcast to the Silicon Valley campus. ECE Silicon Valley students attend classes synchronously with students in Pittsburgh.

Last Modified: 2020-12-01 11:40AM

Semesters offered:

  • Spring 2021
  • Spring 2020
  • Spring 2019
  • Spring 2018