Security architectures for web application (SAW)

Securing web applications: You protect applications against attacks, secure data transmission, and develop robust web systems.

Contents

• Introduction to Web Application Security
• Secure Data Exchange
• The JSON Web Token
• The Web Browser as a Security Risk
• The Most Common Attacks on Web Applications and Their Prevention Measures
• API Security Risks
• Detecting and Analyzing Attacks
• Authentication and Authorization in Web Applications

Competencies

Students are able to

• explain the fundamental security principles and concepts applicable to web applications, including the OWASP Top 10;
• explain the mechanisms and strategies for user authentication and authorization, and implement secure session management using OAuth and OpenID Connect;
• conduct security audits and penetration tests to identify vulnerabilities in web applications and implement appropriate remediation measures; and
• select and apply encryption techniques to secure data transmission and protect sensitive data stored in web applications.

Literature

• A. Hoffman, Web application security: exploitation and countermeasures for modern web applications, Second edition. Beijing Boston Farnham Sebastopol Tokyo: O’Reilly, 2024.
• A. Happe, Einführung in die Web Security: This is why we cannot have nice things. ‎ Independently published, 2021.

Lecturer

• Martina Kraus

Recommended Previous Knowledge 

• Introduction to Computer Science (EI)
• Programming 1 (PR1)
• Programming 2 (PR2)
• Data Management (DM)
• Web-based Systems (WEB)

Module Details

Semester	6/7
Lecture Language	German
Frequency	Not regularly
Credit Points (ECTS)	5
Course Coordinator	Prof. Thomas Smits
Duration	1 Semester
Course Achievement	None
Prerequisite for exam	None
Exam	Continuous Assessment (CA)

Weekly Hours (SWS) 

Lecture	3 SWS
Exercises	1 SWS
Sum	4 SWS

Work Load 

Lecture	50 h
Lab	50 h
Self Study	50 h
Sum	150 h