Module

Voraussetzungen

Inhalte

This lecture introduces different kinds of pervasive systems considering diverse application areas such as telemedicine and homeland security. These examples are used to elaborate security and privacy requirements as well as threats against these goals. Then means ensuring the security goals will be introduced, here a clear focus is on cryptographic systems as the means of implementing security goals. Selected security protocols e.g. for key exchange, digital signature generation/verification, etc. will be discussed taking into account their limitations and means to successfully attack those protocols. Topics covered include in particular: • Topology, functionality and limitations of pervasive systems in different application areas. • Symmetric and asymmetric cryptosystems • Security protocols for key exchange • Generation and verification of digital signatures • Security aspects in the algorithms and their implementations • Security vulnerabilities of the protocols and possible attack targets • Privacy protection issues • Physical attacks and their classification • Side channel attacks (SCA) on encryption means and appropriate countermeasures • Physical processes exploited for SCA; basics of measurement • Fault injection (FI) attacks, physical basics and suitable countermeasures

Lernziele

Upon completion of the module, students will know the basics of security in pervasive systems. They will know the different fields of work in which the systems are used, such as telemedicine and homeland security. They are able to identify security requirements and threats to privacy. They understand how the means presented are used to ensure security requirements. They are able to apply different algorithms in the field. They will be able to analyze security protocols and analyze their weaknesses.

Prüfungsleistung

Prerequisite: • Successful completion of homework OR successful completion of two intermediate written examinations in the course (at least 50% per submission) Final module examination: • Written examination, 90 min. OR • Oral examination, 30 min. (with small number of participants) In the first lecture it will be anounced, which type of prerequisite must be fulfilled and if the examination will be offered in written or oral form.

Bemerkungen

• Study programme Informatik M.Sc.: Compulsory elective module in "Angewandte und technische Informatik" (level 400) • Study programme Cyber Security M.Sc.: Compulsory elective module in complex "Cyber Security Methods" • Study programme Künstliche Intelligenz Technologie M.Sc.: Compulsory elective module in complex „Software-basierte Systeme“