Objectives:
INF143 gives the students an introduction to web security. Well known attacks on computer systems and their corresponding countermeasures are discussed. After the course the students should be able to identify weaknesses in a computer system and be able to suggest how to mitigate them.

Content:
The course discusses different attack methods on computer systems available on the Internet, such as SQL injection, Cross Site Scripting, Denial of Service attacks and password guessing. Securing wireless WiFi networks is explained. How a public key infrastructure is established is part of the curriculum, with particular attention to server authentication on the Internet today.

On completion of the course the student should have the following learning outcomes defined in terms of knowledge, skills and general competence: 

Knowledge
The student knows

• how the most usual attacks on servers on the Internet happen
• how the different standards for securing wireless networks are realised
• what a PKI is, oand how the system with server certificates on the Internet works
  

Skills
The student is able to

• assess which security controls that are most effective against the common attack techniques in computer systems
• explain what kind of security we get in a PKI, with emphasis on practical examples
  

General competence

• The student can discuss which security solutions that will be effective and relevant to introduce in a computer system exposed to the Internet

Student adviser:

mailto:studieveileder@ii.uib.noStudent adviser

T: 55 58 42 00