Web Development and Information Security

Wedi cwblhau'r modiwl dylai'r myfyrwyr fedru:

1. Explain the distinction between structure, content and presentation of web material and the benefits of maintaining that distinction.
2. Write HTML and control its presentation using style sheets.
3. Write client-side code to interact with the web page, read and process form content, and understand the distinction between client-side and server-side.
4. Demonstrate an understanding of the importance of adhering to standards.
5. Demonstrate an understanding of the risks involved in building secure computing systems.
6. Describe various types of cyber-attacks and determine appropriate defences against attack.
7. Demonstrate an understanding of, and apply appropriate encryption methods.
8. Evaluate aspects of computer systems with reference to confidentiality, integrity and availability (the CIA framework).

This module introduces practical skills in web programming, alongside theoretical computer science topics from information security. Much of modern computing occurs on the web: it is not safe, if it is not secure.
In the web section, this module introduces the core technologies and architectures of the web. It will address the way that web content is displayed, how the visual presentation is controlled and how server-side and client-side code are used to control the behavior of the web pages. It will also cover the communications protocol used to transfer web data and consider issues such as validation and DOM manipulation. Students will have the opportunity to develop both theoretical and practical understanding of the web.
In the information security section, this module introduces key concepts in information security, providing an overview of theoretical frameworks for secure systems and practical recommendations. It will cover aspects of software, hardware and network security.

To provide a solid grounding in the practical and theoretical skills required to build secure and usable web applications, and to introduce an understanding of the many ways in which cyber-physical systems can be attacked, and defended against attack.

Web programming

1. Content, presentation and structure. HTML, CSS.
2. Validation, web standards, HTML as XML/SGML. Documents as trees. Browser wars.
3. Client-side scripting - ECMAScript (JavaScript) and HTML forms processing. The Document Object Model.
4. Client and server-side comparison. The HTTP protocol. Introduction to the principles of server-side programming.
5. Multimedia content

Computer and information security:

1. Confidentiality, Integrity, Availability, and risk management
2. Passwords, password management, and network security
3. Encryption
4. Attacks and their mitigation, including social engineering
5. Secure design and defensive code

Mae'r modiwl hwn yn cydymffurfio a FfCChC Lefel 4