Security in Web Programming
CPSC328 N882
Spring 2009

Instructor: Mike Jochen
Office: 337 SCITECH, 422-3036
Class Meeting Time/Place:

Office Hours:

Class Resources:
Syllabus

15 APR 2009: Presentation Schedule for next week:; 4/21 - Jack, Anthony, Tim, Mike; 4/23 - Harold, Nick, Nye, Doug
14 APR 2009: The final lab is assigned!; Submit your work to me electronically (email),; no later than 8 a.m., Tuesday, April 28
1 APR 2009: Final exam scheduled for Thursday, 4/30, from 11 a.m. - 1 p.m.; No, this is not April Fools...
26 MAR 2009: Revised dates for research paper/presentation:; 3/24 Outline; 4/2 Draft Paper; 4/14 Final Paper; 4/14 Slide Review; 4/21, 23 Oral Presentations
16 MAR 2009: Reminder: Homework due 3/19.
Quiz on Thursday: HTBWS 4, 8, OWASPTT 8, 9, 10
09 MAR 2009: Homework #2 is out! Due 19 March, start of class.; Research Project/Oral Presentation is out! Topic selection due 17 March.; (Welcome back!)
02 MAR 2009: Spring Break!!
23 FEB 2009: Mid-Term Exam on Thursday, 2/26; Study guide available soon; Reminder: Lab 1 & Homework due start of class 2/24
12 FEB 2009
: Quiz 3 on Tuesday, 2/17: HTBWS 5 & 6, OWASPTT A1 & A2; Lab 1 Assigned, due on Thursday, 2/19

Slides from Lecture:
Week 1: Web Services
Week 2: Security
Week 2: Privacy
Week 3: Web Services Security
Week 4: User Input
Week 5: More User Input and Injection
Week 6: Attacking the Server
Week 7: State Attacks
Week 8: Authentication & Encryption
Week 9: SOAP & Session Management
Week 10: UDDI
Week 11: .NET Passport
Week 12: Liberty Alliance

Slides from Oral Presentations
Harold
Anthony
Nick
Tim
Ny
Mike
Jack
Doug