ETH Zuerich - Homepage
Information Security

Applied Security Laboratory

Application course held by Prof. Dr. David Basin, Michael Schläpfer, and Andreas Fürst. The course is part of the Information Security Laboratory.


This course emphasizes applied aspects of Information Security. The students will study a number of topics in a hands-on fashion and carry out experiments in order to better understand the need for secure implementation and configuration of IT systems and to assess the effectivity and impact of security measures. This part is based on an extensive script and virtual machines that include example applications, questions, and answers.

The students will also complete an independent project: based on a set of functional requirements, they will design and implement a prototypical IT system. In addition, they will conduct a thorough security analysis and devise appropriate security measures for their systems. Finally, they will carry out a technical and conceptual review of another system. All project work will be performed in teams and must be properly documented.

The Applied Security Laboratory addresses three major topics:


Project schedule:

Semester end exam:




There will be a written exam at the end of the semester. In addition, all participating students will take part in a longer-term project. This project will contribute to the overall grade.

Longer-term Project

The project will involve the installation, configuration, and implementation of a small IT system that must comply with a given set of functional and security requirements. Students will work in small teams to complete the project. Every student team will afterwards review another team's IT system. Each team will write a report that documents their own IT system as well as the results from their review. The report will be graded. Since it is a team project, the grade will be identical for all members of the team.

Course Material and Literature

Course Material

Additional recommended reading:


Michael Schläpfer


Wichtiger Hinweis:
Diese Website wird in älteren Versionen von Netscape ohne graphische Elemente dargestellt. Die Funktionalität der Website ist aber trotzdem gewährleistet. Wenn Sie diese Website regelmässig benutzen, empfehlen wir Ihnen, auf Ihrem Computer einen aktuellen Browser zu installieren. Weitere Informationen finden Sie auf
folgender Seite.

Important Note:
The content in this site is accessible to any browser or Internet device, however, some graphics will display correctly only in the newer versions of Netscape. To get the most out of our site we suggest you upgrade to a newer browser.
More information

© 2011 ETH Zurich | Imprint | Disclaimer | 21 September 2011