Security Engineering

Autumn Semester 2010 (252-0463-00)

Overview

• Lecturer: David Basin
• Wed 10--12, at ML H 37.1

• Tutors: Mohammad Torabi Dashti and Simone Frau
• Fri 10--12, at CAB G 59
  

• 
  

• Prerequisites: Information Security

• Credit: 5 ECTS

• Homework: Optional, but strongly recommended

• Exam: Oral exam on 10 and 11 January 2011, at CNB F 106. Duration 15 min per student. More details available here.
  

• Language: English

Description

Subjects of the class are engineering techniques for developing secure systems. We examine concepts, methods and tools, applied within the different activities of the SW development process to improve security of the system. Topics: security requirements&risk analysis, system modeling&model-based development methods, implementation-level security, and evaluation criteria for secure systems.

Security engineering is an evolving discipline that unifies two important areas: software engineering and security. Software Engineering addresses the development and application of methods for systematically developing, operating, and maintaining, complex, high-quality software.
Security, on the other hand, is concerned with assuring and verifying properties of a system that relate to confidentiality, integrity, and availability of data.

The goal of this class is to survey engineering techniques for developing secure systems. We will examine concepts, methods, and tools that can be applied within the different activities of the software development process, in order to improve the security of the resulting systems.

Resources

- Ross Anderson: Security Engineering, Wiley, 2001.
- Matt Bishop: Computer Security, Pearson Education, 2003.
- Ian Sommerville: Software Engineering, 6th ed., Addison-Wesley, 2001.
- John Viega, Gary McGraw: Building Secure Software, Addison-Wesley, 2002.
- Further relevant books and journal/conference articles will be announced in the lecture.

Course material

Course material can be found here.