Valid for: 2023/24
Faculty: Faculty of Engineering, LTH
Decided by: PLED C/D
Date of Decision: 2023-04-18
Main field: Technology.
Compulsory for: C3
Elective for: BME5, D4-se, D4-ns, E5
Language of instruction: The course will be given in English on demand
The course aims at giving the student knowledge about the security problems and solutions that relate to web based technology. Some areas will be addressed in more detail.
Knowledge and understanding
For a passing grade the student must
Competences and skills
For a passing grade the student must
Judgement and approach
For a passing grade the student must
During the course you have to be prepared to present and discuss your project.
Cryptology: time-memory trade-off attacks.
Web applications security: Security in PHP and MySQL, validation of user data with regular expressions, SQL-injections, cross site scripting, cross site request forgery, directory traversal, file inclusion, session attacks, HTTP response splitting.
Server security: HTTP server, PHP and MySQL configuration.
Client Security: Javascript, cookie-security, same-origin policy, CORS.
Remote login: Basic and digest access authentication.
Email and Spam: Email security, spamming techniques, spam filters, email tracking, DKIM SPF, DMARC, hashcash.
DNS Security: DNS configuration, Amplification attacks, DNS cache poisoning, DNS rebinding, DNSSEC.
A selection of the following topics are also included:
The course also includes project work, which is summarized in a technical report and presented in a seminar.
Grading scale: TH - (U,3,4,5) - (Fail, Three, Four, Five)
Assessment: Approved project work and mandatory online exam is required to pass the course with grade 3. An additional written exam is required for grade 4 or 5.
The examiner, in consultation with Disability Support Services, may deviate from the regular form of examination in order to provide a permanently disabled student with a form of examination equivalent to that of a student without a disability.
Parts
Code: 0123. Name: Project.
Credits: 3,5. Grading scale: UG. Assessment: Passing grade requires an approved written report and an approved oral presentation.
Code: 0223. Name: Tentamen.
Credits: 4. Grading scale: TH. Assessment: Final course grade 3 can be acquired by passing both the project and an online exam. The online exam is compulsory. Course grades 4 and 5 can be acquired through an additional, but optional, written exam.
Assumed prior knowledge: EITA25 Computer Security, EDA016, EDAA50, EDAA55 Programming, First course, or EDAA45 Introduction to Programming, and EDAF90 Web Programming. The student should be able to set up a database and execute simple SQL-queries.
The number of participants is limited to: No
The course overlaps following course/s: EITF05
Course coordinator: Christian Gehrmann, christian.gehrmann@eit.lth.se
Course homepage: https://canvas.education.lu.se/courses/
Further information: When the course is given in Swedish, some parts of the course may still be given in English. All course material is in English.