Kursusbasen

Kursusoversigt

Kursusbeskrivelse

Kursusnavn (dansk):	Security 2
Kursusnavn (engelsk):	Security 2
Semester:	Efterår 2018
Udbydes under:	cand.it., softwareudvikling og -teknologi (sdt)
Omfang i ECTS:	7,50
Kursussprog:	Engelsk
Kursushjemmeside:	https://learnit.itu.dk
Min. antal deltagere:	15
Forventet antal deltagere:	0
Maks. antal deltagere:	55
Formelle forudsætninger:	.
Læringsmål:	After the course, students should be able to 1. Identify potential groups of adversaries and their offensive capabilities and stakeholders and their trust capabilities 2. Design protocols for adversarial environments 6. Explain and apply basic principles and techniques for privacy [7, 19-20, 17-18] 3. Analyze security properties of protocol designs in the symbolic and computational model [3-8+9-12] 4. Identify security policies and evidence for verifiability [15,16] 5. Explain advanced security protocols, such as TLS [13], mixnets [19-20], block-chain protocol [23-24]
Fagligt indhold:	In security I, you learned about the adversarial environment and how difficult it is to secure IT systems. In security II, we will take the opposite position: you learn how to design systems and protocols for security, for the adversarial environment. You will learn how security properties are not compositional; that security is not absolute, that is, any "secure" system leaves residual assumptions, especially about trust; and learn about the reasoning techniques we use to understand these. Specifically, the course covers the practical design, analysis and implementation of security protocols, using: - security protocol design techniques such as mixnets, blockchains, zero-knowledge proofs, - tool-based practical verification, e.g., using Proverif - formal techniques in computational and symbolic models; - security policies and properties, including confidentiality, privacy, integrity, verifiability - case studies of major contemporary protocols such as TLS, Signal, ...
Læringsaktiviteter:	The course comprises lectures, lab sessions. In parallel, a project runs throughout the course. There will be 12 weeks of lectures, 2 weeks of project work only.
Obligatoriske aktivititer:	Quizzes ====== There will be six quizzes on Learn-IT. To be eligible for the exam you must reach at least a 50% average (of all quizzes total). Project ======= At the end of the course, you must submit as a group a project to Learn-IT, which will be evaluated pass/fail. To be eligible for the exam, you must pass the project.
Eksamensform og -beskrivelse:	A11: Skriftlig eksamen (stedprøve) med adgang til internet, skriftlige og trykte hjælpemidler., (7-scale, external exam) Duration of the exam is 4 hours.