| Integration of module into courses of studies: | Informatik, M.Sc., FSPO 2021 Technische und Systemnahe Informatik,
Informatik, M.Sc., FSPO 2021 IT-Sicherheit,
Medieninformatik, M.Sc., FSPO 2021 Technische und Systemnahe Informatik,
Medieninformatik, M.Sc., FSPO 2021 IT-Sicherheit,
Software Engineering, M.Sc., FSPO 2021 Technische und Systemnahe Informatik,
Software Engineering, M.Sc., FSPO 2021 IT-Sicherheit,
Informatik, M.Sc., FSPO 2022 Technische Informatik,
Medieninformatik, M.Sc., FSPO 2022 Technische Informatik,
Software Engineering, M.Sc., FSPO 2022 Technische Informatik |
| Requirements (contentual): | Solid understanding of computer architecture principles (e.g. acquired in computer architecture classes on B.Sc. level),Solid understanding of basic information security principles (as taught in an introductory security class on B.Sc. level),Basic understanding of compiled programming languages (as taught in an introductory class to software systems) |
| Learning objectives: | Students will gain a deepened understanding of security challenges and solutions that are particular to embedded systems. This includes, among others:
- Understand, identify and tamper most common embedded systems protocols
- Understand, pick and work with security techniques in embedded systems
- Identify and avoid the most common embedded systems design and implementation weaknesses
- Understand advanced physical attack and defense mechanisms of embedded systems
- As additional skills, students will gain practical experience with embedded systems and hardware, e.g. basic PCB rework operations |
| Content: | Embedded Systems are present in almost all aspects of our lives. They measure and control processes, collect data and participate in large networks. Protecting these embedded devices from both established and novel attacks remains an important and challenging task.
This course investigates and discusses how embedded devices are commonly attacked and how they are protected using special hardware features, cryptography, as well as system architecture and software security techniques. In the hands-on exercises students work on real hardware in order to acquire the necessary practical skills that are required of embedded security practitioners.
To deepen the discussion in a specific and relevant domain, we also present specific challenges and solutions in automotive systems. Finally, students learn about advanced physical attacks on embedded systems in order to deepen their theoretical understanding of integrated circuits and cryptographic algorithms. |
| Literature: | Catherine H. Gebotys Security in Embedded Devices. Springer 2010,K. Lemke, C. Paar, M. Wolf: Embedded Security in Cars,O'Flynn, v. Woudenberg: The Hardware Hacking Handbook, No Starch Press,Schneier: Applied Cryptography, 2006,plus online sources that will be provided in the lecture |
| Grading procedure: | The module examination consists of a graded written or oral examination, depending on the number of participants. If a specified academic work is achieved, a grade bonus is awarded in accordance with §17 (3a) of the General Examination Regulations at the immediately following examination. The examination grade is improved by one grade level, but not better than 1.0. An improvement from 5.0 to 4.0 is not possible. The examination form will be announced in good time before the examination is held - at least 4 weeks before the examination date. |