Course Webpage
All course materials, such as the syllabus, major assignments, and handouts, can be found on the
course page located on Canvas https://uc.instructure.com/courses/1683040/ (EECE8095-001, crosslisted for all other sections).
Course Description
In this course, students will study basic web application development with front-end
(HTML5, JavaScript, CSS) and back-end (PHP/MySQL). Web application vulnerabilities and attacks will
be introduced and explored with hands-on exercises on the range. Secure programming principles and
practices will be introduced to avoid potential web application vulnerabilities and attacks.
Topics (Tentative):
❖ The Web and Web Application
❖ Client-side Web Development with HTML5, CSS, and JavaScript
❖ Server-side Web Application Development with PHP and Database (MySQL)
❖ Version control (git) and DevOps
❖ Web Application Security: Vulnerabilities and Attacks with Hands-on Exercises
❖ Secure Web Programming Principles and Practices
Course Goals and Objectives:
Students will have the ability to:
❖ obtain the ability and skills to effectively use state-of-the-art techniques in web application
development and security tools for the analysis, design, and implementation of secure web
systems
❖ enhance students programming skills to develop secure, robust, sustainable software products
❖ establish security analysis skills to identify and avoid potential web vulnerabilities
❖ identify the types of security threats and perform attacks in web applications and adopt
corresponding countermeasures to prevent such attacks
❖ obtain the ability and skills to apply practical knowledge of security in designing and
implementing web applications with contemporary programming technologies.
Course Outcomes:
Upon successful completion of this course, students will be able to
:
❖ design, implement, and evaluate a web-based solution to meet a given set of computing
requirements in the context of the programs discipline
❖ understand the principle aspects of concepts of web application security
❖ identify and discuss the types of security threats and attacks in web applications and practical
experience with hands-on exercises
❖ adopt corresponding countermeasures to identified threats in web applications and argue their
effectiveness
❖ apply practical knowledge of security in designing and implementing web applications with
contemporary technologie