Course syllabus

Avancerad webbsäkerhet
Advanced Web Security

EITN41, 7,5 credits, A (Second Cycle)

Valid for: 2019/20
Decided by: PLED C/D
Date of Decision: 2019-04-01

General Information

Elective for: BME5, C4-da, C4-sec, D4-ns, E5
Language of instruction: The course will be given in Swedish

Aim

The course aims at deepen the student’s knowledge about the security problems and solutions that relate to web based technology. Some areas requiring use of cryptographic primitives will be addressed in detail. Knowledge of these will give the student tools to understand also related areas.

Learning outcomes

Knowledge and understanding
For a passing grade the student must

Competences and skills
For a passing grade the student must

Judgement and approach
For a passing grade the student must

Contents

Data representations: CMS, ASN.1, BER, CER and DER encoding

Web Services Security: SAML, XML Signature and encryption, OAuth, OpenID

PKI: CRL, OCSP, RA, CA, and signing procedures

Anonymity: Anonymity solutions, Chaum mixes, Tor, attacks

E-voting: E-voting protocols, homomorphic encryption, ZK-proofs, threshold decryption

Secure messaging: OTR

e-commerce: Electronic payments, SET, 3D Secure, Bitcoin, micropayments, untraceable E-cash

All course material will be in English and some parts of the course might be given in English. Lectures will primarily be given in Swedish.

Examination details

Grading scale: TH - (U,3,4,5) - (Fail, Three, Four, Five)
Assessment: Home assignments, which are graded, gives grade 3 or 4. If grade 4 is achieved on home assignments, grade 5 can be obtained after successful oral exam.

The examiner, in consultation with Disability Support Services, may deviate from the regular form of examination in order to provide a permanently disabled student with a form of examination equivalent to that of a student without a disability.

Admission

Required prior knowledge: EIT060/EITA25 Computer Security, EITF05 Web Security
The number of participants is limited to: No
The course overlaps following course/s: EITN40

Reading list

Contact and other information

Course coordinator: Dr. Martin Hell, martin.hell@eit.lth.se
Course homepage: http://www.eit.lth.se/course/EITN41
Further information: The course material will be in English.