<?xml version="1.0" encoding="ISO-8859-1" standalone="yes" ?>
<document>
<title>Web Security Project</title>
<cid>PIBWI62</cid>
<sapsubmodule>P221-0089</sapsubmodule>
<bkey>pi</bkey>
<ctypes>
<hours>1</hours>
<type>V</type>
<hours>1</hours>
<type>PA</type>
</ctypes>
<cp>3</cp>
<semester>6</semester>
<mandatory>no</mandatory>
<language>German</language>
<exam>Project, presentation, documentation</exam>
<curriculum>
<curriculum_entry>
<cid>KI614</cid>
<branch>Computer Science and Communication Systems</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
<curriculum_entry>
<cid>KIB-PWS</cid>
<branch>Computer Science and Communication Systems</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
<curriculum_entry>
<cid>KIB-PWS</cid>
<branch>Computer Science and Communication Systems</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
<curriculum_entry>
<cid>PIBWI62</cid>
<branch>Applied Informatics</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
<curriculum_entry>
<cid>PIB-PWS</cid>
<branch>Applied Informatics</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
<curriculum_entry>
<cid>PIB-PWS</cid>
<branch>Applied Informatics</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
<curriculum_entry>
<cid>TIB-PWS</cid>
<branch>Technical Computer Science</branch>
<semester>6</semester>
<mandatory_tag>optional course</mandatory_tag>
</curriculum_entry>
</curriculum>
<workload>
30 class hours (= 22.5 clock hours) over a 15-week period.The total student study time is 90 hours (equivalent to 3 ECTS credits).There are therefore 67.5 hours available for class preparation and follow-up work and exam preparation.</workload>
<prerequisites>
</prerequisites>
<prerequisitesfor>
</prerequisitesfor>
<convenor>Prof. Dr. Damian Weber</convenor>
<convenor-person-key>dw</convenor-person-key>
<lecturers>
<lecturer>Dipl.-Inform. Dominik Brettnacher</lecturer>
<lecturer-person-key>dbr</lecturer-person-key>
</lecturers>
<objectives>After successfully completing this module, students will have learned about typical security holes in web applications. 
They know about the effects of such mistakes and how to avoid them in practice.
- Secure development of web applications, getting to know typical target (attack) areas
</objectives>
<content>

- Exemplary implementation of a small application that will be developed during the course of the module.
  (PHP/SQL/JavaScript) 

- Technical and economic impact of exploitable vulnerabilities on the Internet.

- Incident response: My server has been hacked: what do I do if it is already too late?


</content>
<literature>2011 CWE/SANS Top 25 Most Dangerous Software Errors
Günter Schäfer: Netzsicherheit: Algorithmische Grundlagen und Protokolle,
dpunkt.verlag 2003
Risk Management Guide for Information Technology Systems (NIST SP 800-30),
2012
Telekommunikationsgesetz, § 109
Kryptographische Verfahren: Empfehlungen und Schlüssellängen (BSI
TR-02102-1), 2017

Module website: https://pws.blackpond.net/</literature>
<offered>
<semshort>SS 2018</semshort>
<semshort>SS 2017</semshort>
<semshort>SS 2012</semshort>
</offered>
<moduldb-query>Mon Mar 16 06:40:07 CET 2026, CKEY=kpw, BKEY=pi, CID=[?], LANGUAGE=en, DATE=16.03.2026</moduldb-query>
</document>
