Cookies

HTML

JavaScript

Front End Programming

Responsive Web Design

Node.js

Full stack state management

Network Attacks

Data center

URLs and Links

DOM Events

Single Page Applications

Browser/Server Communication

Storage Tier

Input and Validation

Browser Isolation

Large scale applications

Document Object Model (DOM)

React

Building Web Applications

ExpressJS

Session

Web App Security

Other Attacks

CS142: Web Applications Stanford University Winter 2023 This course introduces students to web technologies, enabling them to build sophisticated, interactive applications. It focuses on markup languages, scripting languages, network protocols, interactive graphics, event-driven programming, and databases. Although the World-Wide Web was initially conceived as a vehicle for delivering documents, it is now being used as a platform for sophisticated interactive applications, displacing the traditional mechanism of installable binaries. Web-based applications offer numerous advantages, such as instant access, automatic upgrades, and opportunities for collaboration on a massive scale. However, creating Web applications requires different approaches than traditional applications and involves the integration of numerous technologies. This class will introduce you to the Web technologies and give you experience creating Web applications. In the process you will learn about markup languages, scripting languages, network protocols, interactive graphics, event-driven programming, and databases, and see how they all work together to deliver exciting applications.  The official prerequisites for this class on ExploreCourses are CS107 and CS108. These are listed as the prerequisites because we expect a certain level of engineering maturity and experience. You should be comfortable working with the command line, picking up a new language and framework, reading technical documentation, and debugging your code. Students who have taken this class directly after 106B/X have had to work harder and spend more time than their peers, but it's not impossible. If you have any questions about whether you should take this class, please feel free to contact the staff. ### Additional Materials

There is no required textbook for this class, and I am not aware of a book that is a perfect match to the lecture material. The content of the course is defined by the lectures. You will need additional reference material to complete the programming projects, but this material is available on the Web. One good online source for reference documentation on HTML, CSS, and the DOM is [Mozilla Developer Network](https://developer.mozilla.org/en-US/). A comprehensive book is [Dynamic HTML: The Definitive Reference, Third Edition](http://www.amazon.com/Dynamic-HTML-Definitive-Danny-Goodman/dp/0596527403/ref=sr_1_1?ie=UTF8&s=books&qid=1251152927&sr=1-1), by Danny Goodman (O'Reilly Media), but this describes the Web as of a few years ago, so it doesn't include newer features such as HTML5. It is [freely available](https://go.oreilly.com/stanford-university) to Stanford students.

The web application we build in the course's projects will use what is known as the [MERN stack](https://en.wikipedia.org/wiki/MEAN_(solution_stack)#Angular_and_alternatives). The MERN stack uses the JavaScript language in both the browser and the server-side. The lectures will provide an introduction to JavaScript, but more complete information can be found on the web and in some books freely available to Stanford students through [O'Reilly](https://go.oreilly.com/stanford-university).

- [JavaScript: The Good Parts](https://shop.oreilly.com/product/9780596517748.do) by Douglas Crockford (O'Reilly Media). As the book's title suggests, JavaScript is not a simple language and it is easy to hurt yourself with some of its features. This book recommends a somewhat more safe subset of the language to use.
- [JavaScript Patterns](https://shop.oreilly.com/product/9780596806767.do) by Stoyan Stefanov (O'Reilly Media). JavaScript programmers have discovered ways around issues in the language by doing things in certain ways (i.e. patterns). These patterns are commonly used in JavaScript programs but some of them use strange features of the language so it is not clear what is going on if you don't recognize them as a common pattern.
- [JavaScript: The Definitive Guide, 6th Edition](https://shop.oreilly.com/product/9780596805531.do) by David Flanagan (O'Reilly Media). As the title suggests this is a comprehensive description of JavaScript.
- [Eloquent JavaScript: A Modern Introduction to Programming, 3nd Edition](https://eloquentjavascript.net) by Marijn Haverbeke. A free e-book, it introduces a more modern flavor of JavaScript than the O'Reilly books (which are limited to pre-ES2015 developments).
- [ECMAScript® Language Specification](https://tc39.es/ecma262/), the comprehensive JavaScript standard document.

The class project assignments, lectures and sections will cover what you need to know about the [MERN stack](https://en.wikipedia.org/wiki/MEAN_(solution_stack)#Angular_and_alternatives). For additional material recommend starting at the web sites of the different components:

- [MongoDB](https://www.mongodb.com/) with [Mongoose.js](http://mongoosejs.com/)
- [ReactJS](https://reactjs.org/)
- [Express.js](https://expressjs.com/)
- [Node.js](https://nodejs.org/)

CS142: Web Applications

Computer Programming

Cryptography

Diffie-Hellman key exchange

Bitcoin

UI Attacks

WPA (WiFi Protected Access)

DNS (Domain Name System)

Malware

Memory Safety Vulnerabilities

Pseudorandom Number Generator (PRNG)

Passwords

Cross-Site Scripting (XSS)

DHCP (Dynamic Host Configuration Protocol)

Transport Layer Security (TLS)

Intrusion Detection

Asymmetric Key Cryptography

x86 assembly language

Cryptographic Hashes

Digital signature

Session Management

Networking

TCP (Transmission Control Protocol)

Denial-of-Service (DoS) Attacks

Message authentication code (MAC)

Call stack

Certificates

Cross-Site Request Forgery (CSRF)

ARP (Address Resolution Protocol)

UDP (User Datagram Protocol)

Firewalls

Memory Safety

Security Principles

Public-key cryptography

Same-Origin Policy

DNSSEC

Anonymity

SQL Injection

Symmetric-key Cryptography

Border Gateway Protocol (BGP)

CS 161: Computer Security UC Berkeley Summer 2022 This course offers an introduction to computer security, including cryptography, operating system security, network security, and software security. It uses case studies from real-world systems. Prerequisites include experience working with large codebases and a basic understanding of modular arithmetic/set notation. Introduction to computer security. Cryptography, including encryption, authentication, hash functions, cryptographic protocols, and applications. Operating system security, access control. Network security, firewalls, viruses, and worms. Software security, defensive programming, and language-based security. Case studies from real-world systems.  The prerequisites for CS 161 are:

- CS 61B (Data Structures), for experience working with large codebases (500–1000 lines of code) and basic data structures. This is relevant for Project 2.
- CS 61C (Machine Structures), for understanding of C memory layout and hex/binary number representation. This is relevant for the memory safety unit (Project 1). All necessary CS 61C content will be reviewed during lecture.
- CS 70 (Discrete Math and Probability Theory), for basic understanding of modular arithmetic/set notation and some mathematical intuition. This is relevant in the cryptography unit. We will review any necessary CS 70 content in lectures, so don’t worry if you don’t feel very comfortable with all the CS 70 material.

We assume basic knowledge of C and Python. Some basic familiarity with Unix systems is helpful for Project 1. Project 2 is done in Go and we won’t have any lectures on Go syntax, so we expect students to be able to learn the basics of the language on their own. The readings are all linked on [the course website](https://su22.cs161.org/) and freely available. The majority of readings come from the [course textbook](https://textbook.cs161.org/), which is freely available for you to use as a study and review resource. All readings are optional (but recommended) unless otherwise indicated.

CS 161: Computer Security

Computer Security and Cryptography

Cookies

2 courses cover this concept

CS142: Web Applications

CS 161: Computer Security