Web Commerce, Security and Privacy

			Web Commerce, Security and Privacy School of Computer Science (15-421/08-731) Instructor: Norman M. Sadeh
			Course Objective
			The objective of this course is to introduce students to the technologies of Web Commerce, Security and Privacy as well as to related business, policy and usability issues. top
			Content
	Objective Content Prerequisites Format Meeting Times Grading Textbooks More on Class Projects Course Webpage		Over the past ten years, the Web has become an integral part of our daily life, whether at home or at work. This course provides students with an overview of the technologies and practices associated with Web Security, Privacy and Commerce. The course is organized around three parts: Part I - Web Security & Privacy Technologies The big picture, gentle introduction to cryptography, digital signatures, key management, authentication, Internet security protocols, certificates & PKI, decentralized trust management, privacy enhancing technologies, electronic payments Part II - Ethical, Social and Political Issues Sample Topics: Privacy (e.g. FTC FIP, EU Data Protection Directive), Digital Millenium Copyright Act, Internet Governance and Domain Names (ICANN), legal framework for web commerce, etc. (Note : a number of related issues are also addressed in Part I and III). Part III – Web Commerce The big picture, Internet marketing & personalization, search engines, B2B and electronic markets, P2P, Web 2.0, Mobile Commerce. Click here for a draft syllabus. top
			Prerequisites
			15-211 or permission of the instructor top
			Format
			Lectures (including guest lectures), discussions, student presentations, and class projects. top
			Meeting Times
			Tu-Th, 10:30-11:50am (Fall semester) top
			Grading
			Homework: 15%, Midterm: 20%, Final: 15%, Class Project: 45%, Class Presentation: 5% Class participation is taken into account in assigning final letter grades top
			Textbooks
			Required: • “E-commerce: Business, Technology, Society”, 3rd edition, Kenneth C. Laudon and Carol Guercio Traver, Addison Wesley, 2007 • “Web Security, Privacy and Commerce”, 2nd edition, Simson Garfinkel, O’Reilly, 2002. *Optional* (recommended for final 5 lectures): • "M-Commerce: Technologies, Services and Business Models", Norman Sadeh, Wiley, 2002. Additional required and optional reading material is listed at the end of each lecture top
			More on Class Projects (12-unit section only)
			Projects are conducted in teams of 3 to 5 students. Projects allow students to explore topics and applications or services that they are particularly interested in. Most projects revolve around the design and prototyping of an innovative application (or service). The emphasis is not on hacking but rather on learning to design, evaluate and refine meaningful applications, taking into account technical, business, security, privacy and usability considerations. The level of emphasis placed on each of these considerations varies from one project to another, with some focusing more on software architectures (e.g. web services, mashups, etc.), others on new promising applications (e.g. social networking applications, mobile or pervasive computing applications) and some on particular technologies (e.g. payment technologies, RFID, semantic web, etc.). Students are encouraged to evaluate design alternatives, show that they understand the limitations of their prototypes, and propose ways in which their design could be improved. The scope of each project is refined during the course of the semester through regular meetings with the instructor. Sample of recent projects (2005-2007): Social networking site for sharing location sensitive recommendations and comments, mobile trading application, car pooling web service, enabling people to selectively control who they share their calendar information with, facebook application to enable users to selectively share their locations with others, cross-application forwardable authentication, X+V application to help commuters using the Pittsburgh public transportation system, application to help small companies set up web sites, evaluation and extension of steganography techniques, implementation and evaluation of the SET protocol, personalized search, extending privacy controls in a Friend Finder application, mobile parking payment application, aggregating online multi-attribute online product recommendations, mobile movie ticketing application, etc. top
			Course Webpage
			The course website has been moved to the university blackboard system top