{"id":56439,"date":"2023-08-28T16:33:07","date_gmt":"2023-08-28T16:33:07","guid":{"rendered":"https:\/\/www.inspirenignite.com\/anna-university\/ccs374-web-application-security-syllabus-for-cyber-security-2021-regulation-professional-elective-iii\/"},"modified":"2023-08-28T16:33:07","modified_gmt":"2023-08-28T16:33:07","slug":"ccs374-web-application-security-syllabus-for-cyber-security-2021-regulation-professional-elective-iii","status":"publish","type":"post","link":"https:\/\/www.inspirenignite.com\/anna-university\/ccs374-web-application-security-syllabus-for-cyber-security-2021-regulation-professional-elective-iii\/","title":{"rendered":"CCS374: Web Application Security syllabus for Cyber Security 2021 regulation (Professional Elective-III)"},"content":{"rendered":"

Web Application Security detailed syllabus for Cyber Security (Cyber Security) for 2021 regulation curriculum has been taken from the Anna Universities<\/a> official website and presented for the Cyber Security students. For course code, course name, number of credits for a course and other scheme related information, do visit full semester subjects post given below. <\/p>\n

For Cyber Security 6th Sem scheme and its subjects, do visit Cyber Security 6th Sem 2021 regulation scheme<\/a>. For Professional Elective-III scheme and its subjects refer to Cyber Security Professional Elective-III syllabus scheme<\/a>. The detailed syllabus of web application security is as follows. <\/p>\n

Course Objectives:<\/h4>\n

Download the iStudy App for all syllabus and other updates.<\/a>
\"Get<\/a><\/h4>\n

Unit I<\/h4>\n

FUNDAMENTALS OF WEB APPLICATION SECURITY
\nThe history of Software Security-Recognizing Web Application Security Threats, Web Application Security, Authentication and Authorization, Secure Socket layer, Transport layer Security, Session Management-Input Validation\n<\/p>\n

Unit II<\/h4>\n

SECURE DEVELOPMENT AND DEPLOYMENT
\nWeb Applications Security – Security Testing, Security Incident Response Planning,The Microsoft Security Development Lifecycle (SDL), OWASP Comprehensive Lightweight Application Security Process (CLASP), The Software Assurance Maturity Model (SAMM)\n<\/p>\n

Unit III<\/h4>\n

Download the iStudy App for all syllabus and other updates.<\/a>
\"Get<\/a><\/h4>\n

Unit IV<\/h4>\n

^MMVULNERABILITY ASSESSMENT AND PENETRATION TESTING
\nVulnerability Assessment Lifecycle, Vulnerability Assessment Tools: Cloud-based vulnerability scanners, Host-based vulnerability scanners, Network-based vulnerability scanners, Databasebased vulnerability scanners, Types of Penetration Tests: External Testing, Web Application Testing, Internal Penetration Testing, SSID or Wireless Testing, Mobile Application Testing.\n<\/p>\n

Unit V<\/h4>\n

HACKING TECHNIQUES AND TOOLS
\nSocial Engineering, Injection, Cross-Site Scripting(XSS), Broken Authentication and Session Management, Cross-Site Request Forgery, Security Misconfiguration, Insecure Cryptographic Storage, Failure to Restrict URL Access, Tools: Comodo, OpenVAS, Nexpose, Nikto, Burp Suite, etc.\n<\/p>\n

Practical Exercises<\/h4>\n
    \n
  1. Install wireshark and explore the various protocols<\/li>\n