Sommer
2010

Security / Identity Management
Seminar, 2 SWS

Instructor: Dr. Wolf Müller
Tuesday, 15:15-16:45, RUD 25 ,4.113

Computer Science Department
Systems Architecture Group

• Seminar, Praktische Informatik, Hauptstudium.
• 2h each week, over one semester (2 SWS).
• Students will present a selection of papers that will help you understand which threats exist, judge their significance and learn methods to defend your system against hackers. In addition you will explore the mathematical underpinnings of today's most common security tools and protocols. But most of all you will learn that there is no absolute security - i.e. your will have to learn ways to detect security breaches and recover from them.

Credits:

  In order to obtain credits for this seminar, participants are expected to:

• Attend regularly (at least 90%).
• Read each paper before the seminar, to be adequately prepared for discussion.
• Research an assigned subject; present major findings (45 min presentation; 30 min discussion).
• Presentations will be evaluated by two members of the audience at the end of each class (Bewertungskriterien-Seminarvortrag.pdf).
• Presenters summarize their presentation and relevant discussion on the Seminar's WIKI page within 2 weeks.
• Presentations may be given in English or German. All documents are in English (exceptions may be granted).

Prerequisites:

• This seminar is suitable for students of all technical science disciplines who have previously completed courses PI 1,2,3 or equivalent.

Wiki:

• In addition to the seminar home page (this page), there is a WIKI for dynamically added content, e.g. contributions by students: http://sarwiki.informatik.hu-berlin.de/S2010-SE .

Syllabus:

• nPA (neuer Personalusweis) [Broschüre] [TR] (Robert Göttsch)
• PACE (Paul Bastian)
• NFC, Ideen, Konzepte & Geschäftsmodelle [->] (Magnus Müller)
• eCard-API für mobile Endgeräte (Kristian Beilke)
• Signieren mit dem nPA [TR]
• Chipkartenleser für den nPA und ccid [TR] (Uwe Ritzschke)
• Microsoft Cardspace [Chapter 2] (Papier) (Fabian Weber)
• WS-Security, XML-sig, XML-enc (Buch) (Andreas Grüner)
• SAML 2.0 (Martin Schröder)
• DE-Mail (https://www.bsi.bund.de/DE/Themen/EGovernment/DeMail/DeMail_node.html) (Stephan Verbücheln, Martin Maunz)
• U-Prove [Artikel](Tobias Mühl)
• oAuth [http://www.iam-wiki.org/Home], Xauth [golem] (Sven Sengpiehl)
• eGK (Gérard Baecker)
• Paring-Mechanismen (Jan Fajerski)
• Konzepte zur Begrenzung der Verfügbarkeit von Daten im Web
• OpenID (Zheng Wang)
• RFID (Jonas Liepe)

Links & Material

• NFC http://www.nearfieldcommunicationsworld.com/
• Suisse ID http://www.suisseid.ch/
• U-Prove (Technology Overview) https://connect.microsoft.com/site642/Downloads/DownloadDetails.aspx?DownloadID=26953
• Identitätsdiebstahl und Identitätsmissbrauch im Internet - Rechtliche und technische Aspekte (Studie)

Further Readings (Books):

• Claudia Eckert. IT-Sicherheit
• Ross Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems.
• Bruce Schneier. Applied Cryptography: Protocols, Algorithms, and Source Code in C, Second Edition.