Web and Database Security

Objective of this course: 

The objective of the Web and Database Security course is to provide students with a comprehensive understanding of the principles, practices, and technologies used to protect web applications and databases from security threats and attacks. The course aims to:

1. Introduce fundamental concepts of information security, including confidentiality, integrity, and availability.

2. Identify common web vulnerabilities such as SQL injection, XSS, CSRF, and security misconfigurations.

3. Explore database security mechanisms, including access control, encryption, and auditing.

4. Equip students with practical skills to secure web applications and databases using industry-standard tools and techniques.

5. Develop awareness of secure coding practices and software development life cycles that integrate security.

6. Encourage analytical thinking for assessing security risks and implementing appropriate mitigation strategies.

7. Understand legal and ethical aspects of cybersecurity and data protection in web and database environments.

Course Overview

Internet web sites are increasingly using web applications to access database systems for

information retrieval, transactions and publication. These Internet web applications are

commonly being used for e-commerce, e-banking, and e-government to purchase goods,

make reservations, pay taxes, enroll in classes, retrieve academic transcripts, acquire account         balances and pay bills, to name a few. In order to provide these Internet services

many are connecting their security sensitive information stored in databases directly to the

Internet. And, in many cases, the securities of these applications have been designed with

the same securities as for trusted internal applications. By doing this organizations are creating       security risks of possibly exposing sensitive information, critical business applications

being disabled or compromised. This course looks at the problems associated with using

web applications that access databases for Internet services. It also discusses some options

of securing web services that utilize databases, as well as the overall security layers needed.