Web Application Security
Get the full GTU study material, English & Gujarati textbook PDFs, syllabus curriculum, and solved previous year question papers.
English Book & Chapters
English Book Coming Soon
We are working hard to add this material. Stay tuned for updates!
Follow on Instagram for UpdatesGTU Previous Year Papers
Papers Coming Soon
We are working hard to add this material. Stay tuned for updates!
Follow on Instagram for UpdatesWeb Application Security Syllabus — Unit-wise Content
The official GTU curriculum for Web Application Security (subject code 3174806) as prescribed for CS-Cyber · Semester 7 divides the course into 5 units, covering 5 listed topics. The unit-wise breakdown below is read from the GTU syllabus document for this subject code, so you can check what the course actually covers before deciding which papers to attempt.
Download the official syllabus PDF (3174806)Unit 1 INTRODUCTION
- History of Software Security – OWASP Top Ten List 2021 – Input Validation – Attack Surface Reduction – Classifying and Prioritizing Threats
Unit 2 WEB APPLICATION SECURITY PRINCIPLES Authentication -
- Access Control Overview - Two Factor and Three Factor Authentication - Web Application Authentication – Authorization - Session Management Fundamentals - Securing Web Application Session Management
Unit 3 COMMON WEB APPLICATION VULNERABILITIES Cross Site
- Scripting- Reflected XSS- Stored XSS- DOM based XSS- Mutation based XSS – Cross Site Request Forgery - SQL Injection – Code Injection – Insecure Direct Object References (IDOR)
Unit 4 SECURE DEVELOPMENT AND DEPLOYMENT Application
- Security- Training- Threat Modelling- Secure Coding Libraries- Code Review- Security TestingSecurity Incident Response Planning – Microsoft Security Development Lifecycle (SDL) – OWASP Comprehensive Lightweight Application Security Process (CLASP) – Software Assurance Maturity Model (SAMM)
Unit 5 MITIGATIONS AND COUNTERMEASURES Anti XSS Coding Best
- Practices- Sanitizing User Input – Anti CSRF Coding Best Practices – Mitigating Against SQL Injection – Generic Injection Defenses – Defending Against IDOR – Architecture Level Mitigations 08 Program Name: Bachelor of Engineering Level: UG Subject Code : 3174806 Subject Name : Web Application Security w.e.f. 2025-26 http://syllabus.gtu.ac.in/ Page no. 1 of
Study on Android App:
