Course Information
- Instructor: Seongil Wi
- Time: Tuesday/Thursday 16:00 ~ 17:15
- Location: 106-T202
- Grading:
- 5% Participation
- 20% Midterm exam (No final exam)
- 15% Homework
- 20% Paper Presentation
- 40% Project
- Textbook:
- Andrew Hoffman, Web Application Security
The course provides in-depth studies of various web attacks and defenses, encompassing a comprehensive exploration of security vulnerabilities and privacy risks present on the web. Additionally, discussions will focus on detecting these vulnerabilities and mitigating privacy risks.
Late Submission Policy
Late submission will be assessed a penalty of 10% per day (We will only accept late submissions of up to 3 days).
Paper Presentation
- Presentation Time: 30 mins (+QnA 5 mins)
- Evaluation:
- Organization/clarity
- You should present a summary of the contribution of the paper at the very beginning of your presentation.
- Quality of criticism (You should present your opinion!)
- Presentation skills
- Participation points will be awarded to students asking (valuable) questions!
Schedule
Date | Topic | Reading | Notes |
---|---|---|---|
02/27/2024 | Introduction | ||
02/29/2024 | Web Programming | ||
03/05/2024 | Client-side Security | [Squarcina/USENIXSEC2023] | Paper Assignment (6PM) |
03/07/2024 | Server-side Security |
[Wi/WWW2022] [Jovanovic/S&P2006] |
|
03/12/2024 | Server-side Security (2) | ||
03/14/2024 | Cross-Site Scripting |
[Steffens/NDSS2019] [Son/NDSS2013] [Lekies/CCS2013] |
Project Proposal Due (Mar. 15, 11:59 PM) |
03/19/2024 | No Class | ||
03/21/2024 | Cross-Site Scripting (2) | HW1 out | |
03/26/2024 | Content Security Policy |
[Weichselbaum/CCS2016] [Roth/CCS2021] [Wi/NDSS2023] |
|
03/28/2024 | Cross-Site Request Forgery |
[Barth/CCS2008] [Pellegrino/CCS2017] |
|
04/02/2024 | Clickjacking & XS-Leaks |
[Rautenstrauch/S&P2023] [Huang/USENIXSEC2012] |
|
04/04/2024 | Extensions & Phishing |
[Kapravelos/USENIXSEC2014] [Thomas/S&P2015] [Zhang/S&P2021] |
|
04/09/2024 | SSL/TLS & HTTPS |
[Brubaker/S&P2014] [Durumeric/NDSS2017] |
HW1 due (11:59 PM) |
04/11/2024 | Passwrod |
[Bonneau/S&P2012] [Bonneau/S&P2012] |
|
04/16/2024 | Midterm weak | ||
04/18/2024 | Midterm weak |
Midterm Exam (Class Time) |
|
04/23/2024 |
Paper Presentation (Web Attacks) |
|
|
04/25/2024 |
Paper Presentation (Web Attacks) |
|
Project Checkpoint Due (Apr. 26, 11:59 PM) |
04/30/2024 |
Paper Presentation (Web Attacks) |
|
|
05/02/2024 |
Paper Presentation (Web Attacks) |
|
|
05/07/2024 |
Paper Presentation (XS-Leaks) |
|
|
05/09/2024 |
Paper Presentation (Cross-Site Communication) |
|
|
05/14/2024 |
Paper Presentation (Phishing) |
|
|
05/16/2024 |
Paper Presentation (Phishing) |
|
|
05/21/2024 |
Paper Presentation (Tracking&AD) |
|
|
05/23/2024 |
Paper Presentation (Tracking&AD) |
|
|
05/28/2024 |
Paper Presentation (Fingerprint) |
|
|
05/30/2024 |
Paper Presentation (JS Engine Fuzzing) |
|
|
06/04/2024 |
Paper Presentation (Content Security Policy) |
|
|
06/06/2024 | Memorial Day | ||
06/11/2024 | No class (Final weak) | ||
06/13/2024 | No class (Final weak) |
Final Report Due (Jun. 14, 11:59 PM) |