WEB SECURITY (Professional Elective - IV) IV Year B.Tech. IT I - Sem JNTUH R-18

1. Explain the layered architecture of the Web and identify potential security vulnerabilities at each layer.

2. Discuss the key principles of risk analysis in web security and outline different risk assessment frameworks.

3. Compare and contrast symmetric and asymmetric encryption, and analyze their role in securing web communications.

4. Explain the purpose and operation of digital certificates and their importance in ensuring trust and security online.

5. Discuss the legal restrictions on cryptography in different countries and how it impacts web security practices.

Unit - II: Privacy and Web Threats

1. Analyze the various techniques used to track user activity online and discuss the implications for privacy.

2. Describe different privacy-protecting methods, such as cookies blocking, incognito browsing, and VPNs.

3. Explain the importance of securing web servers and identify common vulnerabilities such as SQL injection and cross-site scripting (XSS).

4. Discuss the challenges of physical server security and outline best practices for access control and monitoring.

5. Analyze common security vulnerabilities in web applications and describe approaches to prevent them.

Unit - III: Database Security and Access Control

1. Describe recent advancements in access control models for databases, including role-based access control (RBAC) and attribute-based access control (ABAC).

2. Explain the challenges of access control for XML databases and discuss potential solutions.

3. Analyze the security concerns associated with data warehouses and OLAP systems and propose mitigation strategies.

4. Describe the concept of security re-engineering for databases and its applications in securing legacy systems.

5. Explain the principles of database watermarking for copyright protection and its effectiveness in deterring data theft.

Unit - IV: Database Security and Emerging Trends

1. Discuss the concept of trustworthy records retention and its importance in maintaining data integrity and compliance.

2. Explain the principles of damage quarantine and recovery in data processing systems and their role in incident response.

3. Analyze the challenges and capabilities of Hippocratic databases in enforcing privacy and security policies.

4. Describe the concept of privacy in database publishing from a Bayesian perspective and its practical applications.

5. Discuss the emerging trends in mobile database security and challenges of enforcing security and privacy policies in mobile environments.