CS492: Web Security Attack Laboratory
The course introduces various web attacks that trigger various vulnerabilities in target web services. The course also provides a lab session for each week, which helps students practice real attacks in simulated web environments. The goal of the course is to let students learn and understand various web threats via conducting the attacks by themselves.
Basic Information
- Lecture: Tuesday/Thursday 10:30 AM - 11:45 AM
- Instructor: Sooel Son
- Email: sl.son (at) kaist.ac.kr
- Homepage: https://sites.google.com/site/ssonkaist/
- Lecture room: TBD
- Lab sessions: TBD
- Office hours: Appointment only
- T.A.: Jihwan Kim
Evaluation
- Attendance & Class participation: 10%
- Lab sessions : 40%
- Assignments : 30%
- Final exam: 20%
Schedule
The following schedule is subject to change.
1st week
- 8/31: [Course Introduction]
- 9/2: [Lab session #0: Preparation]
2nd week
- 9/7: [Web Programming Basic #1: HTML and JavaScript]
- 9/9: [Lab session #1]
3rd week
- 9/14: [Web Programming Basic #2: Server-side Web Application]
- 9/16: [Lab session #2]
4th week
- 9/21: Holiday
- 9/23: [Lab session #3]
- Assignment #1 by 9/30
5th week
- 9/28: [SQL Injection]
- 9/30: [Lab session #4]
6th week
- 10/5: [Same Origin Policy & Cookie]
- 10/7: [Lab Session #5]
- Assignment #2 by 10/15
7th week
- 10/12: [Reflected XSS]
- 10/14: [Lab Session #6]
8th week
- 10/19: Mideterm season
- 10/21: Mideterm season
9th week
- 10/26: [Client-side XSS]
- 10/28: [Lab Session #7]
- Assignment #3 by 11/5
10th week
- 11/2: [Cross-site Request Forgery]
- 11/4: [Lab Session #8]
11th week
- 11/9: [Shell Code Injection and File Inclusion]
- 11/11: [Lab Session #9]
12th week
- 11/16: [Unrestricted File Upload]
- 11/18: [Lab Session #10]
13th week
- 11/23: [Property-Oriented Programming]
- 11/25: [Lab Session #11]
14th week
- 11/30: [Web Application Firewall / Content Security Policy]
- 12/2: [Lab Session #12]
- Assignment #4 by 12/2
15th week
- 12/7: [Phishing and 2nd Factor Authentication]
- 12/9: [Final Lab Session #13]
16th week
- 12/16: Final exam from 9:30 AM to 10:30 AM