After successful completion of the course, students are able to, students are able to critically deal with the basics of IT security from the overall view of an IT system. Students have learned how to recognize security-relevant aspects in projects at an early stage in the engineering process of systems and can initiate suitable measures to achieve a sufficient level of IT security during the operation of systems. In addition, students learn how systems fail and how systems can be made to fail. Students sharpen their awareness that the overall security of systems is relevant and that individual aspects are not sufficient to achieve an adequate level of security.

The topics of the lecture are among others

• Operating System Security
• Network Security
• Intrusion Detection, Intrusion Prevention
• Security in Software Development
• Web Application Security
• Security of Mobile Applications
• Organizational Security
• Risk Management
• Security Architectures
• Cryptography
• Finding Security Holes

In the lecture the necessary technical foundations are taught, research in depth is guided on demand, and real, often large, case studies are presented. In the exercises the application of different aspects of the lecture are deepened and extended in 3 single and team tasks (among them an CTF contest)  in our IT security lab infrastructure.

Effort for the student (ECTS-Breakdown):

Preliminary talk: 1 h
Lectures: 15 h
Written Exam: 1.5 h
Self Study (Exercises, Preparation Time for Written Exam): 57.5

Total: 75 hours (3 ECTS)

There is both a lecture and an exercise part including a CTF contest, whereby concrete attacks on IT systems are carried out in exercise environments.
Both parts must be completed positively.

Content of 183.594 Introduction to Security