Skip to content
lectern.tv
MIT 6.858: Computer Systems Security →0/22
1

1. Introduction, Threat Models

1:17:12
2

2. Control Hijacking Attacks

1:27:38
3

3. Buffer Overflow Exploits and Defenses

1:21:37
4

4. Privilege Separation

1:23:29
5

6. Capabilities

1:21:57
6

7. Sandboxing Native Code

1:23:21
7

8. Web Security Model

1:22:48
8

9. Securing Web Applications

1:22:08
9

Lecture 10: Symbolic Execution (6.858)

1:22:16
10

Lecture 11: Ur/Web (6.858)

1:20:04
11

Lecture 12: Network Security (6.858)

1:18:26
12

Lecture 13: Network Protocols (6.858)

1:21:03
13

Lecture 14: SSL and HTTPS (6.858)

1:18:18
14

Lecture 15: Medical Software (6.858)

1:15:31
15

Lecture 16: Side-Channel Attacks (6.858)

1:22:16
16

Lecture 17: User Authentication (6.858)

1:19:48
17

Lecture 18: Private Browsing (6.858)

1:20:13
18

Lecture 19: Anonymous Communication (6.858)

1:20:13
19

Lecture 20: Mobile Phone Security (6.858)

1:22:00
20

Lecture 21: Data Tracking (6.858)

1:19:38
21

Lecture 22: Information Security at MIT IS&T (6.858)

1:26:51
22

Lecture 23: Security Economics (6.858)

1:17:25

9. Securing Web Applications

Nickolai ZeldovichMIT

Professor

1:22:08·2017·graduate level

This lecture, part of MIT's advanced computer systems security course, delves into the principles and common vulnerabilities encountered when designing and implementing secure web applications. Topics include protection against prevalent attack vectors such as injection flaws and cross-site scripting.

Systems & CSSystems SecurityWeb SecurityApplication SecuritySecurity Engineering

MIT 6.858 Computer Systems Security, Fall 2014

View the complete course: http://ocw.mit.edu/6-858F14

Instructor: James Mickens

Previous · Lecture 7

8. Web Security Model

Next · Lecture 9

Lecture 10: Symbolic Execution (6.858)

Seminar notes & discussion

Sign in to comment

No public seminar notes on this lecture yet.