Winter
2004

Security Engineering
(Seminar 2 SWS)

Instructor: Dr. Wolf Müller


Computer Science Department
Systems Architecture Group

 

 
Abstract: As a user of the Internet, you are fortunate to be tied into the world's greatest communication and information exchange - but not without a price. As a result of this connection, your computer, your organization's network, and everywhere the network reaches are all vulnerable to potentially disastrous infiltration by hackers. [W. Cheswick. Firewalls and Internet Security] 
 
Synopsis:
  • Seminar, Praktische Informatik, Hauptstudium.
  • 2h each week, over one semester (2 SWS).
  • Students will present a selection of papers that will help you understand which threats exist, judge their significance and learn methods to defend your system against hackers. In addition you will explore the mathematical underpinnings of today's most common security tools and protocols. But most of all you will learn that there is no absolute security - i.e. your will have to learn ways to detect security breaches and recover from them.

Credits:

In order to obtain credits for this seminar, participants are expected to:

  • Attend regularly (at least 90%).
  • Read each paper before the seminar, to be adequately prepared for discussion.
  • Present 1-2 papers (45 min presentation; 30 min discussion).
  • Presenters summarize their presentation and relevant discussions on a WIKI page within 2 weeks.
  • Presentations may be given in English or German. All documents are in English (exceptions may be granted).

Prerequisites:

  • This seminar is suitable for students of all technical science disciplines who have previously completed course PI-1 or equivalent.

Syllabus:

  • What is Security Engineering - How to think about Security (PDF)
  • Protocols (PDF)
  • Passwords (PDF)
  • Access Control (PDF)
  • Cryptography (PDF)
    The DES Algorithm Illustrated (tutorial)
  • Security in Distributed Systems (PDF)
  • Multilevel Security
  • Multilateral Security
  • Monitoring Systems (PDF)
  • Digital Certificates and Digital Signatures (PDF, openSSL)
  • Security Printing and Seals
  • Evaluation of Programs and Code
  • Biometrics
  • Physical Tamper Resistance
    • Wireless LAN WEP
    • German Mout-System
  • Emission Security (PDF)
  • Electronic and Information Warfare
  • Telecom System Security
  • Network Attack and Defense
  • Security in E-Commerce Systems (PDF)
    • Public Key Infrastructure (PKI)
    • X.509 Certificates
  • Secure Electronic Documents (Case Study: Acrobat/PDF)
  • Copyright and Privacy Protection
    • Digital Rights Management (DRM)
       

Assignments (Themenvergabe):

Date

Presenter 

Topic

19.10.04Wolf MüllerIntroduction
26.10.04Wolf MüllerSecurity Concerns (Authenticity, Integrity, Privacy, Non-Repudiation)
02.11.04Niklas Darien Lambert
Robert Schumann
Passwords
9.11.04Andreas Weiß
Daniel Mauter
Encryption Algorithms (DES, RSA)
16.11.04Martin Apel
Alexander Röhnsch
Attack Types (Denial of Service, Man in the Middle)
23.11.04Robert Gabriel SteinAccess Control
30.11.04Philipp Reinecke
Michael Spranger
Distributed Systems
07.12.04Andre Masula
Maximilian Buder
Digital Certificates and Digital Signatures (PPT)
14.12.04Bayarkhun Munkhbaatar
Friedrich Hildebrand
Authentication Mechanisms
Security in E-Commerce Systems
04.01.05Stephan Edel
Anne Walther
Monitoring Systems
11.01.05Guido Furche
Michael Menz
Emission Security
18.01.05Christian Carstensen
Jens Kleine
Evaluation of Programs and Code: stack and heap based overflow exploits, shellcode
“Reflections on Trusting Trust” (PPT)
25.01.05Stefan ZillerNetwork Attack & Defense (Introduction, Defense against   Network Attacks, Nessus) 
01.02.05Thorsten Schröder
Gregor Kopf
Network Attack & Defense II: (Trojans, Viruses, Intrusion Detection, chkrootkit)
8.02.05Henryk Plötz
Matthias Plischke
Biometry
15.02.05Mathias Jeschke
Sven Wittig
Secure Documents (PDF, EFS/Windows)


Suggested Readings (Books):

  • Ross Anderson. Security Engineering: A Guide to Building Dependable Distributed Systems.
  • Bruce Schneier. Applied Cryptography: Protocols, Algorithms, and Source Code in C, Second Edition.
 Links
SAR WiKi
Security Engineering
Cambridge
Ross Anderson's home page
NIH
Computer Security Information
NIST
Computer Security Resource Center
NIST
Federal Information Processing Standards Publications (FIPS)


 


Legal disclaimer. .  © 2023 Humboldt-Universität zu Berlin, Computer Science Department, Systems Architecture Group.Contact: sar@informatik.hu-berlin.de .