FREE
AKTU Web and Database Security (BCCS051) Syllabus PDF – B.Tech 3rd Year
Web and Database Security BCCS051
All syllabus, notes, question bank & PYQ for this subject
Free
Download now
- English
- Semester 5
- 0 downloads
- 0 views
Official AKTU syllabus of Web and Database Security (BCCS051) for B.Tech 3rd Year – 3 credits, L-T-P 3-0-0. Read the unit-wise course content, course outcomes, evaluation pattern and recommended books online, or download the PDF.
Syllabus — Web and Database Security
Download PDFBCCS051 · 3 credits · L-T-P 3-0-0
Course Outcomes
At the end of course , the student will be able:
| CO 1 | Understanding Web Application Fundamentals | K2 |
| CO 2 | Understand various authentication techniques and identify common design and implementation flaws. | K2,K4 |
| CO 3 | To gain proficiency in reviewing source code to identify security vulnerabilities in various platforms (Java, ASP.NET, PHP, Perl, Javascript, SQL) and learn about fundamental data security requirements | K3,K4 |
| CO 4 | Understand the mechanisms of user authentication and password protection in databases. | K2,K5 |
| CO 5 | Understand how to protect the data dictionary, manage system and object privileges, and secure data outsourcing | K2, |
Course Content
L-T-P: 3-0-0
| Unit | Topic | Proposed Lecture |
|---|---|---|
| I | UNIT I Web Application Basics: Introduction, HTTP Protocol, Web Functionality, Encoding Schemes, Enumerating Content and Functionality, Analyzing the Application ,Authentication Security: Authentication Techniques, Design Flaws in Authentication, Implementation Flaws in Authentication, Securing Authentication, Path Traversal Attacks, Injection Attacks: Injecting into Interpreted Contexts, SQL Injection, NoSQL Injection, XPath Injection, LDAP Injection, XML Injection, Http Injection, Mail Service Injection | 08 |
| II | UNIT II Cross Site Scripting (XSS): Types of XSS, XSS in Real World, Finding and Exploiting XSS Vulnerabilities, Preventing XSS Attacks, User Attacks: Inducing User Actions, Capturing Cross-Domain Data, Client-Side Injection Attacks, Local Privacy Attacks, ActiveX Control attacks, Browser Attacks | 08 |
| III | Unit III Vulnerability Analysis of Source Code: Approaches to Code Review, Signatures of Common Vulnerabilities, Analysis of Java platform, Analysis of ASP.NET platform, Analysis of PHP, Analysis of Perl, Analysis of Javascript, Analysis of SQL, Introduction To Database Security: Fundamental Data Security Requirements, Data Security Concerns, Compliance Mandates, Security Risks, Developing Enterprise Security Policy, Defining a Security Policy, Implementing a Security Policy, Techniques to Enforce Security | 08 |
| IV | UNIT IV Database Access Control: User Authentication, Protecting Passwords, Creating Fixed Database Links, Encrypting Database Link Passwords, Using Database Links Without Credentials, Using Database Links And Changing Passwords, Auditing With Database Links, Restricting A Database Link With Views, Trust Management & Negotiation , | 08 |
| V | UNIT V Database Security Issues: Database Security Basics, Security Checklist, Reducing Administrative Effort, Applying Security Patches, Default Security Settings, Secure Password Support, Enforcing Password Management, Protecting The Data Dictionary, System and Object Privileges, Secure Data Outsourcing, Security in Advanced Database Systems, Managing Enterprise User Security. | 08 |
Text Books
- “The Web Application Hacker’s Handbook”, Dafydd Stuttard, Wiley India Pvt. Ltd.
- “ Database Security” , S.Castano, M. Fugini, G. Martella,P. Samarati, Addision-Wesley
- “ Database Security “ Alfred Basta, Melissa Zgola, Cengage Publication, 2012.
Ratings & Reviews
No reviews yet — share your experience with this item.