Project(s)
Web Shop Under Attack
The course includes one project assignment. This is a programming project in which you will create a small but essentially fully functional web shop. You will secure your web shop against some common web threats, and you will demonstrate how some of these attacks work and how to mitigate them.
The project must be completed in groups of 3-4 people. Paul has assigned you to a project group according to the grouping list found here.
Your group will produce and hand in three deliverables:
- a written report bundle,
- source code and configuration files httpd.conf and php.ini for your web shop,
- material for the oral presentation.
The project groups are divided into small clusters of 3 (or 2) project groups, and you will make an oral presentation in English for Paul and the groups in your cluster.
You will both provide and receive feedback on written and oral presentations, as specified in the detailed project instructions below.
Project documents
Detailed project instructions: here
Functionality review form: here
Contribution statement form: here
Deadlines
2017-09-12 at 23.59, book presentation time for your cluster (time slots listed below), email Paul.
2017-10-04 at 23.59, mail your report to your reviewers, cc Paul.
2017-10-06 at 23.59, mail your reviews to your peers, cc Paul.
2017-10-13 at 23.59, mail your report bundle to Urkund, mail your code and configuration files for both web server and PHP to Paul.
Day before scheduled presentation at 23.59, mail presentation slides (pdf) to Paul.
Grouping
See separate grouping menu here for project group and cluster definitions.
Functionality reviews
Functionality reviews are performed by the project groups pairwise, according to the detailed project description and the functionality review form. All group members must participate and teacher attendance is mandatory. Please use the following pre-booked times and locations for your functionality review session - Paul will be there. Multiple and parallel sessions are expected. These are drop-in times, so no need to book with Paul in advance.
2017-10-12, Thu, 13 - 16, E:3139.
2017-10-13, Fri, 13 - 15, E:3139.
Office hours
Paul is available at his office in E:3120d for IRL consultation when at office on Tuesdays and Thursdays. If office hours coincide with a lecture/exercise session, Paul will be at the lecture/exercise session.
Please respect these office hours (or office days)!
At other hours, you may use Paul's 24/7 mailing service. That is, you can email your question to Paul at any time, and Paul will answer as soon as it is conveniently possible to do so.
Available presentation slots (rooms E:2349 and E:2517):
If you need only the presentation slides that you handed in (pdf format), Paul will bring those.
You may then use Paul's computer for your presentation, if you wish to.
If you want to use anything other than a pdf presentation, bring your own computer.
There are projectors in E:2349 and E:2517 with HDMI and VGA connectors.
2017-10-17, Tue, 9 - 10, not available.
2017-10-17, Tue, 10 - 11, not available.
2017-10-17, Tue, 11 - 12, not available.
2017-10-18, Wed, 9 - 10, not available.
2017-10-18, Wed, 10 - 11, not available.
2017-10-18, Wed, 11 - 12, not available.
2017-10-18, Wed, 13 - 14, not available.
2017-10-18, Wed, 14 - 15, available.
2017-10-18, Wed, 15 - 16, available.
Booked presentation slots (cluster-sorted):
Red cluster (groups 1 - 3), in E:2517, 2017-10-18, Wed, 11 - 12.
Orange cluster (groups 4 - 6), in E:2517, 2017-10-18, Wed, 10 - 11.
Yellow cluster (groups 7 - 9) + Filip Ström, in E:2349, 2017-10-17, Tue, 11 - 12.
Green cluster (groups 10 - 12), in E:2349, 2017-10-17, Tue, 10 - 11.
Blue cluster (groups 13 - 15), in E:2349, 2017-10-17, Tue, 9 - 10.
Purple cluster (groups 16 - 18), in E:2517, 2017-10-18, Wed, 13 - 14.
Pink cluster (groups 19 - 21), in E:2517, 2017-10-18, Wed, 9 - 10.
Grey cluster (groups 22 - 23), booked individually.
Booked presentation slots (time-sorted):
2017-10-17, Tue, 9 - 10, Blue cluster (groups 13 - 15), in E:2349.
2017-10-17, Tue, 10 - 11, Green cluster (groups 10 - 12), in E:2349.
2017-10-17, Tue, 11 - 12, Yellow cluster (groups 7 - 9) + Filip Ström, in E:2349.
2017-10-18, Wed, 9 - 10, Pink cluster (groups 19 - 21), in E:2517.
2017-10-18, Wed, 10 - 11, Orange cluster (groups 4 - 6), in E:2517.
2017-10-18, Wed, 11 - 12, Red cluster (groups 1 - 3), in E:2517.
2017-10-18, Wed, 13 - 14, Purple cluster (groups 16 - 18), in E:2517.
2017-10-18, Wed, 14 - 15, available.
2017-10-18, Wed, 15 - 16, available.