Web and Database Security

Catalog description

The web, and web-connected databases, are the cornerstone of modern Internet activity. Their pivotal role makes them prime targets for cyber-attacks. Web servers such as Apache have a number of critical attack surfaces; understanding the correct configuration and use is essential. Similarly, large databases have interfaces to public networks, with many ways to exploit them. This course provides practical training in the use of web servers and databases, so that they can be deployed securely as part of a large information system. Advanced topics in Web data management, with an emphasis on secure access, will be covered. New techniques for retrieving documents from search engines, including the use of links, user-behavior knowledge. Database approaches for Web data management, including integration with vector databases and LLM-augmented querying. Semi-structured data management, including data models, query languages and XML. Emerging AI-related attack surfaces, including prompt injection and adversarial inputs targeting AI-integrated web systems, will also be explored. Prerequisite: INFO 501 and INFO 532. Typically offered once every academic year.