Secure Electronic Commerce Final Exam Review - University of Tulsa

Final exam review for CS 7403 course on Secure Electronic Commerce at the University of Tulsa covers topics such as web security, payment security, and Bitcoin. The exam logistics include date, time, and permitted materials. Detailed exam topics, both on homework and not on homework, are listed for each category. Students are expected to be familiar with various security concepts and protocols related to electronic commerce.

• Electronic Commerce
• University of Tulsa
• Web Security
• Payment Security
• Bitcoin

hashemi_a Follow

Uploaded on Sep 29, 2024 | 0 Views

Download Presentation

Please find below an Image/Link to download the presentation.

The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. Download presentation by click this link. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.

Presentation Transcript

1. Final Exam Review CS 7403 Secure Electronic Commerce University of Tulsa Tyler Moore

2. Final Exam Logistics Fri 4/29 9am-11:25am in CS conference room (Rayzor 2235) Exam is comprehensive Calculators allowed (though not needed) must be actual calculator, not smartphone Handwritten notes on one side of single sheet of letter paper (8.5 x11 )

3. Topics: Web Security Exam Topics (on HW) Exam Topics (not on HW) Topics NOT ON EXAM Cookies Content Security Policies Any Material from Student Presentations Same Origin Policy (Cookies, DOM) Sandboxed iFrames Frame Access Policies (postMessage) SQL Injection, XSS, CSRF Certificates SSL/TLS Revocation

4. Topics: Payment Security Exam Topics (on HW) Exam Topics (not on HW) Topics NOT ON EXAM EMV design Double-Entry Bookkeeping Game Theory SDA vs DDA vs CDA in EMV Separation of Duty Clark-Wilson Model EMV attacks Test-Key Encryption PCI/DSS SWIFT CVV2 ATM security protocol 3DSecure Tokenization Economics of Payment Security Password Salts

5. Topics: Bitcoin Exam Topics (on HW) Exam Topics (not on HW) Topics NOT ON EXAM Bitcoin transactions (3.1) Crypto hash functions (1.1) Bitcoin Scripts beyond Pay-to-PubkeyHash Bitcoin blocks (3.4) Hash pointers (1.2) Actual representation of bitcoin transactions (e.g., Figure 3.3) Incentives and proof-of-work (2.4) Block chain consensus (2.2-3) 51% attack Bitcoin Pay-to-PubkeyHash script (start of 3.2, fig 3.7) High-level comprehension of Bitcoin operation (Q6, Q7) Bitcoin network (3.5) Local storage (4.1) Hot and cold storage (4.2) Risks and regulation (JEP paper) De-anonymizing bitcoin (6.1-2) Payment services (4.5)