|
| 1 | +<!-- BEGIN HEADER --> |
| 2 | +<!DOCTYPE html> |
| 3 | +<html> |
| 4 | +<head> |
| 5 | + <title>Cyber Security Base: Course Project I</title> |
| 6 | + <meta charset="UTF-8"> |
| 7 | + <meta name="viewport" content="width=device-width, initial-scale=1.0"> |
| 8 | + |
| 9 | + <link href="https://fonts.googleapis.com/css?family=Roboto" rel="stylesheet"> |
| 10 | + |
| 11 | + <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous"> |
| 12 | + |
| 13 | + <link rel="stylesheet" href="/assets/css/mooc-icon/style.css"/> |
| 14 | + <link rel="stylesheet" href="/assets/css/csa.css"/> |
| 15 | + <link rel="stylesheet" href="/assets/css/csa-mooc.css"/> |
| 16 | + |
| 17 | +</head> |
| 18 | + |
| 19 | +<body> |
| 20 | + <!-- BEGIN NAV --> |
| 21 | + <header role="navigation"> |
| 22 | + <h1> |
| 23 | + <a href="http://mooc.fi" alt="MOOC" target="_blank"> |
| 24 | + <span class="icon-mooc"></span> |
| 25 | + </a> |
| 26 | + <button type="button" data-toggle="collapse" data-target=".bs-navbar-collapse"> |
| 27 | + <span class="sr-only">Toggle navigation</span> |
| 28 | + <span class="icon-bar"></span> |
| 29 | + <span class="icon-bar"></span> |
| 30 | + <span class="icon-bar"></span> |
| 31 | + </button> |
| 32 | + </h1> |
| 33 | + <nav class="collapse bs-navbar-collapse" role="navigation"> |
| 34 | + <ul> |
| 35 | + <li> |
| 36 | + <a href="#" class="table-of-contents-trigger"> |
| 37 | + Table of contents |
| 38 | + </a> |
| 39 | + </li> |
| 40 | + </ul> |
| 41 | + |
| 42 | + <ul class="pull-right side-nav"> |
| 43 | + <li> |
| 44 | + <a href="#" class="login-trigger"> |
| 45 | + Log in |
| 46 | + </a> |
| 47 | + </li> |
| 48 | + </ul> |
| 49 | + |
| 50 | + </nav> |
| 51 | + |
| 52 | + </header> |
| 53 | + <!-- // END NAV --> |
| 54 | + |
| 55 | + <article> |
| 56 | + <!-- END HEADER --> |
| 57 | + |
| 58 | + <!-- BEGIN CONTENT --> |
| 59 | + <section class="no-toc weeklimit hidden" data-week-id="0"> |
| 60 | + |
| 61 | + <h1>Assignments</h1> |
| 62 | + |
| 63 | + <ul class="nav nav-pills nav-pills-fixed-width nav-pills--no-border" id="assignments-toc"></ul> |
| 64 | + |
| 65 | + </section> |
| 66 | + <!-- END CONTENT --> |
| 67 | + |
| 68 | + |
| 69 | + <!-- BEGIN INTRODUCTION --> |
| 70 | + <section class="weeklimit" data-week-id="1"> |
| 71 | + |
| 72 | + <aside class="info"> |
| 73 | + <br/> |
| 74 | + <h1>How to get started?</h1> |
| 75 | + |
| 76 | + <p>This material contains the introduction part of the course series called "Cyber Security Base with F-Secure". In order to answer the questionnaires and essays, you will need a MOOC.fi account that you can create at <a href="https://tmc.mooc.fi/user/new" target="_blank" onclick="trackOutbound('https://tmc.mooc.fi/user/new'); return false;">https://tmc.mooc.fi/user/new</a>. Once you've signed up, you can login to this page (click on the top right corner).</p> |
| 77 | + |
| 78 | + <p>Once you have created the account, please answer a background questionnaire at <a href="https://elomake.helsinki.fi/lomakkeet/74256/lomake.html" target="_blank">https://elomake.helsinki.fi/lomakkeet/74256/lomake.html</a>. Answering the questionnaire should take less than 10 minutes and will be very valuable for the research conducted on this course.</p> |
| 79 | + |
| 80 | + <p>When answering the short essay questions in this course, please answer them carefully and with thought. Other participants in the course will review them and may give you feedback.</p> |
| 81 | + |
| 82 | + </aside> |
| 83 | + <header> |
| 84 | + <h1 id="part-project">Cyber Security Base - Course Project I</h1> |
| 85 | + </header> |
| 86 | + |
| 87 | + |
| 88 | + <p>In the first course project, your task is to create a web application that has at least five different flaws from the OWASP top ten list (<a href="https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf" target="_blank">https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf</a>). Starter code for the project is provided on Github at <a href="https://github.com/cybersecuritybase/cybersecuritybase-project" target="_blank">https://github.com/cybersecuritybase/cybersecuritybase-project</a>.</p> |
| 89 | + |
| 90 | + <aside class="warning"> |
| 91 | + <br /> |
| 92 | + <p>If you want ECTS credits you will need to register with Open University of University of Helsinki AFTER completing the course: |
| 93 | + <b>Link available for passed students at TBA</b> This applies to everyone wanting the credits, there is no other registration. This is not the same registration as the registration for the Introduction or the registration for Securing Software. Join the mailing list for updates! |
| 94 | + </p> |
| 95 | + </aside> |
| 96 | + |
| 97 | + <p>You will then write a brief (1000 words) report that outlines how the flaws can be first identified and then fixed. Your report has to be within 20% of this limit, otherwise our merciless automated robots will fail your submission. For the identification process, we suggest that you use tools that have been used in the course, such as <a href="https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project" target="_blank">Owasp ZAP</a>. Once these two tasks have been completed, you will review five projects from other course participants.</p> |
| 98 | + |
| 99 | + <p>You may do the project without using the starter template (in a language of your own choosing). In that case, however, you must also provide guidelines for installing and running the web application on Windows, Linux and Mac (including guidelines for installing any possible required dependencies). If you are given a project for review that has not been constructed using the starter code (in a language that you do not know), you may request another project for review (this can be done by reloading this page).</p> |
| 100 | + |
| 101 | + <p>A discussion channel has been set up for the project. The channel is the <a href="http://matrix.org/">Matrix</a> room <code>#cybersecuritybase:matrix.org</code>. We recommend that you join the room with the following link: <a href="https://riot.im/app/#/room/#cybersecuritybase:matrix.org" target="_blank">https://riot.im/app/#/room/#cybersecuritybase:matrix.org</a>. If you wish to use another program for participating the discussions, visit <a href="https://matrix.org/docs/projects/try-matrix-now.html" target="_blank">https://matrix.org/docs/projects/try-matrix-now.html</a>.</p> |
| 102 | + |
| 103 | + <p>If you hate modern technology, the channel is also bridged to <code>#cybersecuritybase</code> on Freenode. Use at your own risk.</p> |
| 104 | + |
| 105 | + |
| 106 | + <h2>Returning the project</h2> |
| 107 | + |
| 108 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052972"></div> |
| 109 | + |
| 110 | + <h2>Performing the reviews</h2> |
| 111 | + |
| 112 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052973"></div> |
| 113 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052974"></div> |
| 114 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052975"></div> |
| 115 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052976"></div> |
| 116 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052977"></div> |
| 117 | + |
| 118 | + <h2>View reviews</h2> |
| 119 | + |
| 120 | + <div class="quiznator-plugin" data-quiz-id="5c0fa568f594be5d2f052978"></div> |
| 121 | + |
| 122 | + |
| 123 | + |
| 124 | + |
| 125 | + </section> |
| 126 | + |
| 127 | + <!-- END INTRODUCTION --> |
| 128 | + |
| 129 | + |
| 130 | + </article> |
| 131 | + |
| 132 | + <!-- LOGIN MODAL --> |
| 133 | + <div class="modal fade" id="tmc-login-modal" tabindex="-1" role="dialog"> |
| 134 | + <div class="modal-dialog" role="document"> |
| 135 | + <div class="modal-content"> |
| 136 | + <div class="modal-header"> |
| 137 | + <button type="button" class="close" data-dismiss="modal" aria-label="Close"><span aria-hidden="true">×</span></button> |
| 138 | + <h4 class="modal-title">Log in with your MOOC.fi account</h4> |
| 139 | + </div> |
| 140 | + <div class="modal-body"> |
| 141 | + <div class="alert alert-info"> |
| 142 | + Don't have a MOOC.fi account? <a href="https://tmc.mooc.fi/user/new" target="_blank">Sign up</a>. |
| 143 | + </div> |
| 144 | + |
| 145 | + <div class="alert alert-danger" id="tmc-login-error" style="display: none"> |
| 146 | + </div> |
| 147 | + |
| 148 | + <div class="form-group"> |
| 149 | + <label>Username or email</label> |
| 150 | + <input type="text" id="tmc-login-username" class="form-control" placeholder="Username or email"/> |
| 151 | + </div> |
| 152 | + |
| 153 | + <div class="form-group"> |
| 154 | + <label>Password</label> |
| 155 | + <input type="password" id="tmc-login-password" class="form-control" placeholder="Password"/> |
| 156 | + </div> |
| 157 | + |
| 158 | + <div class="form-group"> |
| 159 | + <a href="https://tmc.mooc.fi/password_reset_keys/new">I forgot my password</a> |
| 160 | + </div> |
| 161 | + </div> |
| 162 | + |
| 163 | + |
| 164 | + <div class="modal-footer"> |
| 165 | + <button type="button" class="btn btn-default" data-dismiss="modal">Close</button> |
| 166 | + <button type="button" class="btn btn-primary" id="tmc-login-submit">Log in</button> |
| 167 | + </div> |
| 168 | + </div> |
| 169 | + </div> |
| 170 | + </div> |
| 171 | + |
| 172 | + <!-- TABLE OF CONTENTS --> |
| 173 | + <div class="table-of-contents-layer"> |
| 174 | + </div> |
| 175 | + |
| 176 | + <div class="table-of-contents"> |
| 177 | + <h1 class="table-of-contents__heading"> |
| 178 | + Table of contents |
| 179 | + </h1> |
| 180 | + |
| 181 | + <div class="table-of-contents__content"> |
| 182 | + <ul class="nav" id="material-toc"></ul> |
| 183 | + </div> |
| 184 | + </div> |
| 185 | + |
| 186 | + <!-- PROGRESS --> |
| 187 | + <div class="content-progress"> |
| 188 | + <div class="content-progress__label"> |
| 189 | + </div> |
| 190 | + |
| 191 | + <div class="content-progress__bar"> |
| 192 | + </div> |
| 193 | + </div> |
| 194 | + |
| 195 | + |
| 196 | + <!-- QUIZNATOR DASHBOARD --> |
| 197 | + <div class="quiznator-dashboard"></div> |
| 198 | + |
| 199 | + <!-- BROWSER SUPPORT WARNING --> |
| 200 | + <div class="browser-support-warning"> |
| 201 | + Some parts of this page might not work on your current browser. Consider switching to either <a href="https://www.google.com/chrome/browser/desktop/" target="_blank">Chrome</a> or <a href="https://www.mozilla.org/en-US/firefox/new/" target="_blank">Firefox</a>. |
| 202 | + <a class="pull-right browser-support-warning__close">Got it!</a> |
| 203 | + </div> |
| 204 | + |
| 205 | + <script src="https://quiznator.mooc.fi/javascripts/plugin-loader.min.js"></script> |
| 206 | + |
| 207 | + <script src="https://code.jquery.com/jquery-3.1.1.min.js" |
| 208 | + integrity="sha256-hVVnYaiADRTO2PzUGmuLJr8BLUSjGIZsDYGmIJLv2b8=" |
| 209 | + crossorigin="anonymous"></script> |
| 210 | + <script src="https://code.jquery.com/ui/1.12.0/jquery-ui.min.js"></script> |
| 211 | + |
| 212 | + <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js" integrity="sha384-Tc5IQib027qvyjSMfHjOMaLkfuWVxZxUPnCJA7l2mCWNIpG9mGCD8wGNIcPD7Txa" crossorigin="anonymous"></script> |
| 213 | + |
| 214 | + <script src="/assets/js/tmc-client-js/dist/tmc-client.min.js"></script> |
| 215 | + <script src="/assets/js/bowser/bowser.js"></script> |
| 216 | + <script src="/assets/js/csa.js"></script> |
| 217 | + |
| 218 | + <script> |
| 219 | + (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){ |
| 220 | + (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), |
| 221 | + m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) |
| 222 | + })(window,document,'script','https://www.google-analytics.com/analytics.js','ga'); |
| 223 | + |
| 224 | + ga('create', 'UA-86250620-1', 'auto'); |
| 225 | + ga('set', 'anonymizeIp', true); |
| 226 | + ga('require', 'linkid'); |
| 227 | + ga('send', 'pageview'); |
| 228 | + |
| 229 | + var trackOutbound = function(url) { |
| 230 | + ga('send', 'event', 'outbound', 'click', url, { |
| 231 | + 'transport': 'beacon', |
| 232 | + 'hitCallback': function(){ window.open(url); } |
| 233 | + }); |
| 234 | + } |
| 235 | + </script> |
| 236 | + |
| 237 | + |
| 238 | + <!-- COOKIES --> |
| 239 | + <link rel="stylesheet" type="text/css" href="//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.1/cookieconsent.min.css" /> |
| 240 | + <script src="//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.1/cookieconsent.min.js"></script> |
| 241 | + <script>window.cookieconsent.initialise({"palette":{"popup":{"background":"#000"},"button":{"background":"#f1d600"}}});</script> |
| 242 | + </body> |
| 243 | + </html> |
0 commit comments