A course module on clickjacking

Clickjacking is a form of UI-Redress where a victim thinks they are browsing the webpage they see, but click actions are actually on a hidden webpage. Methods for detecting and preventing clickjacking attacks are available, however. One of these methods should be included to let the website recognize it is in an iFrame, and then "break" out of the frame, i.e. refresh the page directly to its URL, or not load the page in the first place. Currently it is important to increase the implementation rate of these methods in websites. This paper introduces a clickjacking course module which includes a tutorial of clickjacking, and a hands-on lab. Our teaching experience with this course module is discussed. This course module can be adopted in web security or network security courses introducing how clickjacking works.