Web Security

Stanford University via YouTube

Start learning Write review

Details

Start learning

Provider

YouTube
Pricing

Free Online Course
Languages

English
Duration & workload

1 day 1 hour
Sessions

On-Demand

Found in

Overview

This course is a comprehensive overview of web security. The goal is to build an understanding of the most common web attacks and their countermeasures. Given the pervasive insecurity of the modern web landscape, there is a pressing need for programmers and system designers to improve their understanding of web security issues. We'll be covering the fundamentals as well as the state-of-the-art in web security.

Topics include: Principles of web security, attacks and countermeasures, the browser security model, web app vulnerabilities, injection, denial-of-service, TLS attacks, privacy, fingerprinting, same-origin policy, cross site scripting, authentication, JavaScript security, emerging threats, defense-in-depth, and techniques for writing secure code. Course projects include writing security exploits, defending insecure web apps, and implementing emerging web standards. Instructor: Feross Aboukhadijeh (https://feross.org)

Syllabus

Web Security - Lecture 01 - What is Web Security? HTML & JavaScript Review.
Web Security - Lecture 02 - HTTP, Cookies, Sessions.
Web Security - Lecture 03 - Session Attacks.
Web Security - Lecture 04 - Cross-Site Request Forgery, Same Origin Policy.
Web Security - Lecture 05 - Exceptions to the Same Origin Policy.
Web Security - Lecture 06 - Cross-Site Scripting (XSS).
Web Security - Lecture 07 - Cross-Site Scripting Defenses.
Web Security - Lecture 08 - Fingerprinting and Privacy on the Web - Pete Snyder.
Web Security - Lecture 09 - Denial-of-service, Phishing, Side Channels.
Web Security - Lecture 10 - Code Injection.
Web Security - Lecture 11 - Transport Layer Security.
Web Security - Lecture 12 - HTTPS in the Real World - Emily Stark & Chris Palmer.
Web Security - Lecture 13 - Authentication.
Web Security - Lecture 14 - WebAuthn - The future of user authentication - Lucas Garron.
Web Security - Lecture 16 - Managing security concerns in a large Open Source project - Myles Borins.
Web Security - Lecture 17 - Server security: Safe coding practices.
Web Security - Lecture 18 - Local HTTP server security.
Web Security - Lecture 19 - DNS rebinding attacks.
Web Security - Lecture 20 - Browser architecture, Writing secure code.

Taught by

Feross

Reviews

4.8 rating, based on 26 Class Central reviews

Start your review of Web Security

Hamit Bisane

CS 253 Web Security is an excellent course for anyone interested in learning about the security vulnerabilities of the web and how to build secure web applications. The instructor, Feross Aboukhadijeh, is knowledgeable and engaging, and the course c…

CS 253 Web Security is an excellent course for anyone interested in learning about the security vulnerabilities of the web and how to build secure web applications. The instructor, Feross Aboukhadijeh, is knowledgeable and engaging, and the course content is well-structured and easy to follow.

Strengths:

Comprehensive coverage of web security topics: The course covers a wide range of topics, including web application vulnerabilities, injection attacks, denial-of-service attacks, TLS security, browser security, and emerging threats.
Hands-on learning: The course includes several hands-on projects, such as writing security exploits and defending insecure web applications. These projects help to solidify the concepts learned in the lectures.
High-quality lectures and materials: The lectures are well-paced and informative, and the slides and other materials are well-organized and easy to understand.
Engaging instructor: Feross Aboukhadijeh is an experienced web security expert and a skilled communicator. He is passionate about the subject matter and makes the lectures engaging and interesting.
Weaknesses:

Some prior knowledge of web development is helpful: While the course does not require any prior knowledge of web development, some familiarity with HTML, JavaScript, and Node.js will be beneficial.
Course content can be challenging at times: The material covered in the course is complex, and some students may find it challenging to keep up.
Mashrur Rahman

CS 253 Web Security is an excellent course for anyone interested in learning about the security vulnerabilities of the web and how to build secure web applications. The instructor, Feross Aboukhadijeh, is knowledgeable and engaging, and the course c…

CS 253 Web Security is an excellent course for anyone interested in learning about the security vulnerabilities of the web and how to build secure web applications. The instructor, Feross Aboukhadijeh, is knowledgeable and engaging, and the course content is well-structured and easy to follow.

Strengths:

Comprehensive coverage of web security topics: The course covers a wide range of topics, including web application vulnerabilities, injection attacks, denial-of-service attacks, TLS security, browser security, and emerging threats.
Hands-on learning: The course includes several hands-on projects, such as writing security exploits and defending insecure web applications. These projects help to solidify the concepts learned in the lectures.
High-quality lectures and materials: The lectures are well-paced and informative, and the slides and other materials are well-organized and easy to understand.
Engaging instructor: Feross Aboukhadijeh is an experienced web security expert and a skilled communicator. He is passionate about the subject matter and makes the lectures engaging and interesting.
Weaknesses:

Some prior knowledge of web development is helpful: While the course does not require any prior knowledge of web development, some familiarity with HTML, JavaScript, and Node.js will be beneficial.
Course content can be challenging at times: The material covered in the course is complex, and some students may find it challenging to keep up.
Nazmul Miah @TRY2LEARN

Wow Meticulous in keeping the workplace clean and tidy. Charlotte makes a habit of keeping own area clean and hazard-free and also assists and encourages others to do the same. Reacts quickly and decisively in an emergency, keeping a cool head and effectively leading others. Applies professional experience and/or knowledge of people expertly to forecast outcomes with at least 90% accuracy. Others trust his judgement because the choices have usually been good. Late on fewer than 3 occasions in 6 months.
PCPT MARK EDISON P BANTILAN @Markuz

Although some videos are very time consuming and they have long duration, I was able to learn lots of new information and data that are new to me and first time to encounter. I hope that this course will also help others in the future.
Syed Muhammad Ammar Kazmi @ammarkazmi

Amazing it is one of the most comprehensive courses I've ever found. Really good for beginners who just starting out on the web, but note that you really need to explore more about the web cause there is much more to come.
Sarthak Mhatre

I recently completed a web security course that exceeded my expectations. The curriculum was comprehensive, covering both foundational and advanced topics with clarity and depth. The instructors demonstrated a keen understanding of the subject matte…

I recently completed a web security course that exceeded my expectations. The curriculum was comprehensive, covering both foundational and advanced topics with clarity and depth. The instructors demonstrated a keen understanding of the subject matter, offering real-world examples and practical exercises that enhanced my learning experience. The course delved into crucial areas like encryption, authentication, and secure coding practices, providing me with valuable insights to fortify web applications against potential threats. The interactive nature of the content kept me engaged, and the hands-on labs allowed me to apply theoretical knowledge in a practical setting. Overall, an excellent investment for anyone serious about enhancing their web security expertise.
Abdullah Al Kafee

I would rate this course 5 stars. This course is an excellent introduction to web security, covering topics such as cryptography, authentication, session management, cross-site scripting, cross-site request forgery, SQL injection, and more. The instructor, Feross Aboukhadijeh, is a web security expert and a great teacher. He explains the concepts and techniques clearly and concisely, using real-world examples and demonstrations. He also provides practical tips and best practices for building secure web applications. The course is well-structured, engaging, and informative. I learned a lot from this course and I highly recommend it to anyone who is interested in web security.
Deepak Kumar @deepakcode

I'm writing this review for the students who are new to Cyber Security. This course is beginner to a very good level. You will understand the basic concepts the words which are very common in cyber security. Must watch.
Francisco Mancuello

It's amazing.
A good advanced course on web security and countermeasures.
It focuses on establishing an understanding of the most common web attacks and their countermeasures. Some of the main topics include browser security model, web application vulnerabilities, injection, denial of service attacks, TLS attacks, privacy, fingerprinting, same origin policy, cross-site scripting, authentication, JavaScript security, threats emerging, defense in depth and techniques for writing secure code.
Costen Zulu

Thank you for the opportunity granted to me to get involved and given the chance to take part in this course which is being offered freely to us, I appreciate the work arrangements and how detailed the course is. Am encouraging other students to take an active part to grab this opportunity as it's available to everyone to access. My great thanks to the team offering this to us, I really appreciate you
Loeub Seyla

"Web Security" is an indispensable course for anyone interested in safeguarding online assets. With comprehensive coverage of topics like encryption, authentication, and secure coding practices, it equips learners with vital skills to protect against cyber threats.
Richal Gangwar

Nice course helpful in learning the basics of web security and detailed explanation in course helps in implementing of various techniques in real life industrial working that helps in mega companies. This course is becoming job ready professional in cybersecurity
Hassan Iftoni

I learned so much. This is a great course. I took my time and went over everything, especially all the information. I now have an idea at least even if I don't know everything.
Sarveena

It's easy to understand it's good and has many information still the course are very use full and we can learn many new technical words and we can improve our knowledge
Raheema Aman

Beneficial if you are interested in programming or computer fields much appreciated course . It helps a lot to increase your knowledge
Sufiyan Vidhani

Course is good thankyou sir for providing the course I like the course and I have got so much knowledge from this course
Prathmesh Dhanrale

Great course every concept is explained properly by the teacher and very helpful for students to understand the web security.
Shivam Bhalerao

Great course learned a lot from it and it will definately help me in my further activities in my carrier
I_SRIMANTH

Course is very much understandable and easy . Web security is need more attention for user privacy and cookies are carries the information that we are uses which are accessible to thirdparty websites which are harmful
Benjamin Andoh

Wasn't bad a course. I have learnt soo many good things and it has introduced me to the course and has also won my interest in try to advance myself in learning more and getting alot of experience from this.