FR
EN
ASL 1: Sécurité des applicationsSécurité des Infrastructures et des Services (STI)
ASL 1 : Application Security
Teaching unit Application Security · AS09_SA1 | EC Code AS09_SA1-1
4ECTS (EU)
1Coefficient
21:20Hours
Séquencement
Learning objectives
This module introduces students to the security of applications and their evaluation through an audit process. After presenting the different types of audits that are commonly carried out, students learn to perform an offensive audit of an application by understanding current vulnerabilities and how to exploit them, but also their origin and how to correct them, whether during the design, implementation or deployment of an application.
Prerequisites
| Module | Teaching unit | Semester |
|---|---|---|
| Web Engineering | Network and System Administration | S6 |
| Advanced Java Programming | Fundamental Computer Science | S7 |
| System Security | Computer Security | S7 |
| Network Security | Computer Security | S7 |
Program
- Why and How to Assess Application Security
- Types of audits
- Intrusion test methodology
- How a web application works
- Reminder of HTTP protocol, n-third architecture, AJAX and API
- Features and vulnerabilities of web applications
- Authentication and session
- Code injections
- Partitioning defects
- File handling
- Post-operation
- Intrusion test tools
Assessment
- TP applying the phases of recognition, discovery and exploitation of vulnerabilities
- QCM on course elements
SecNumEdu Skills
| Skill | Lecture hours | Practical hours | Entry level | Exit level |
|---|---|---|---|---|
| Penetration testing | 8 | 8 | 0 | 2 |
| Introduction to the methodology of intrusion tests and the discovery and exploitation of current vulnerabilities | ||||