▶Japanese
Post to SNS
- Home
- > School of Computing
- > School of Computing
- > Attack and Defense on Cybersecurity II
- School of Science
-
School of Engineering
- Undergraduate major in Mechanical Engineering
- Undergraduate major in Systems and Control Engineering
- Undergraduate major in Electrical and Electronic Engineering
- Undergraduate major in Information and Communications Engineering
- Undergraduate major in Industrial Engineering and Economics
- Common courses
- School of Materials and Chemical Technology
- School of Computing
- School of Life Science and Technology
- School of Environment and Society
- 工学院，物質理工学院，環境・社会理工学院共通科目
- Liberal arts and basic science courses
- First-Year Courses
- School of Science
- School of Engineering
- School of Materials and Chemical Technology
- School of Computing
- School of Life Science and Technology
-
School of Environment and Society
- Department of Architecture and Building Engineering
- Department of Civil and Environmental Engineering
- Department of Transdisciplinary Science and Engineering
- Department of Social and Human Sciences
- Department of Innovation Science
- Graduate major in Technology and Innovation Management
- Common courses
- Liberal arts and basic science courses
- Academic unit or major
- School of Computing
- Instructor(s)
- Fukumoto Yoshinari Tanaka Keisuke
- Class Format
- Lecture / Exercise
- Media-enhanced courses
- Day/Period(Room No.)
- Intensive ()
- Group
- -
- Course number
- XCO.T476
- Credits
- 2
- Academic year
- 2019
- Offered quarter
- 3Q
- Syllabus updated
- 2019/4/2
- Lecture notes updated
- -
- Language used
- English
- Access Index
-
Course description and aims
Cybersecurity is important for our daily lives including various types of activities. There is a growing demand for students who can be researchers and engineers capable of understanding cybersecurity.
In order to satisfy this demand, Tokyo Tech has launched Progressive Graduate Minor in Cybersecurity in April 2016. We design the curriculum of Progressive Graduate Minor in Cybersecurity in collaboration with NRI as the core, also with Rakuten, NTT, AIST, and NISC. The following six courses are organized in School of Computing: Foundation of Cybersecurity (1Q, 2-0-0), Theory of Cryptography for Cybersecurity (3Q, 2-0-0), Cybersecurity Governance (3Q, 1-1-0), Attack and Defense on Cybersecurity I (2Q, 1-1-0), Attack and Defense on Cybersecurity II (3Q, 1-1-0), and Attack and Defense on Cybersecurity III (4Q, 1-1-0).
This course is one of the core courses in this minor and focuses on web security, one of the most important elements of cybersecurity. In particular, we first focus on OWASP Top 10, which represents a broad consensus about the most critical security risks to web applications. Then, based on it, the students will acquire practical knowledge on the attack and the defence on web security.
Student learning outcomes
By the end of this course, students will be able to understand:
1) the overview of web security
2) the primitives of web security
3) the tools used in web security.
Keywords
security, information security, cybersecurity, cryptography, network, software, programming, web application
Competencies that will be developed
| ✔ Specialist skills | Intercultural skills | ✔ Communication skills | ✔ Critical thinking skills | ✔ Practical and/or problem-solving skills |
Class flow
The class offers a standard type and a hands-on exercise style of lecture.
Course schedule/Required learning
| Course schedule | Required learning | |
|---|---|---|
| Class 1 | The overview of this course, the overview of web security, and the introduction to OWASP Top Ten Project. | Understand the notions on web security. |
| Class 2 | Top 1 to 3 of OWASP TOP 10 2013 | Understand the schemes of attack on web applications. |
| Class 3 | Top 4 to 6 of OWASP TOP 10 2013 | Understand the schemes of attack on web applications. |
| Class 4 | Top 7 to 10 of OWASP TOP 10 2013 | Understand the schemes of attack on web applications. |
| Class 5 | Introduction to OWASP Broken Web Applications Project. | Understand the schemes of attack and defense on web applications. |
| Class 6 | Hands-on training for OWASP Broken Web Applications 1 | Understand the schemes of attack and defense on web applications. |
| Class 7 | Hands-on training for OWASP Broken Web Applications 2 | Understand the schemes of attack and defense on web applications. |
| Class 8 | Hands-on training for OWASP Broken Web Applications 3 | Understand the schemes of attack and defense on web applications. |
| Class 9 | Hands-on training for local proxy | Understand the local proxy. |
| Class 10 | Hands-on training for the HTTP protocol | Understand the HTTP protocol. |
| Class 11 | Practical problems in cybersecurity | Understand the practical problems in cybersecurity. |
| Class 12 | Hands-on hacking training 1 | Understand the schemes of attack and defense. |
| Class 13 | Hands-on hacking training 2 | Understand the schemes of attack and defense. |
| Class 14 | Hands-on hacking training 3 | Understand the schemes of attack and defense. |
| Class 15 | CTF Challenge | Understand the schemes of attack. |
Textbook(s)
Textbooks will be used in this course.
Reference books, course materials, etc.
References will be announced in classes.
Assessment criteria and methods
The evaluation consists of the exercises solved in the classes.
Related courses
- XCO.T473 ： Foundation of Cybersecurity
- XCO.T474 ： Theory of Cryptography for Cybersecurity
- XCO.T478 ： Cybersecurity Governance
- XCO.T475 ： Attack and Defense on Cybersecurity I
- XCO.T477 ： Attack and Defense on Cybersecurity III
Prerequisites (i.e., required knowledge, skills, courses, etc.)
Students must have successfully completed Attack and Defense on Cybersecurity I (XCO.T475), or have equivalent knowledge.
Contact information (e-mail and phone) Notice : Please replace from "[at]" to "@"(half-width character).
keisuke[at]is.titech.ac.jp
Office hours
Appointment by e-mail is required.
