Security Protocols and Infrastructures. Chapter 00: Formalities and Contents

Transkript

1 Harald Baier and / Winter Term 2011/2012 1/20 Security Protocols and Infrastructures Chapter 00: and Harald Baier Hochschule Darmstadt, CASED Winter Term 2011/2012

2 Harald Baier and / Winter Term 2011/2012 2/20

3 Harald Baier and / Winter Term 2011/2012 2/20

4 Harald Baier and / Winter Term 2011/2012 2/20 Literature

5 Harald Baier and / Winter Term 2011/2012 2/20 Literature Hinweise (in German)

6 Harald Baier and / Winter Term 2011/2012 3/20 Literature Hinweise (in German)

7 Harald Baier and / Winter Term 2011/2012 4/20 General Remarks 1. Elective module in Master of Computer Science / JIM: Catalogue: Application systems. Applicable for IT-Security track. 2 SWS lecture + 1 SWS practical + 1 SWS exercises = 5 ECTS. 2. Time schedule of lecture: Friday, 12 pm to 1:30 pm (Lecture hall D19/0.07). Start: Friday,

8 Harald Baier and / Winter Term 2011/2012 5/20 x-y-raster

9 Harald Baier and / Winter Term 2011/2012 6/20 Practical / Exercises Practical: 1. Every second Friday, 2:15 pm - 3:45 pm. 2. Lecture hall: D14/ practicals. 4. You have to pass all practicals!!! Exercises: 1. Every second Friday, 2:15 pm - 3:45 pm. 2. Lecture hall: D14/ exercises. 4. Voluntary participation (preparation is strongly recommended).

10 Harald Baier and / Winter Term 2011/2012 7/20 Teaching Cooperation with TUD 1. Students from TUD: Please fill in the circulating list. 2. Further questions regarding time table, locations,...?

11 Harald Baier and / Winter Term 2011/2012 8/20 Literature Hinweise (in German)

12 Harald Baier and / Winter Term 2011/2012 9/20 Security Protocols (1/3) Cryptographic Primitives: Security goals Cryptographic base techniques Mathematical foundations of cryptographic primitives Attack models on encryption The Diffie-Hellman key exchange scheme The RSA cryptographic scheme

13 Harald Baier and / Winter Term 2011/ /20 Security Protocols (2/3) Security Protocols for electronic ID cards: Basic Access Control Extended Access Control PACE

14 Harald Baier and / Winter Term 2011/ /20 Security Protocols (3/3) Further topics: Security Protocols for the Internet: Transport Layer Security Secret Sharing and Zero Knowledge: Shamir s secret Challenge Response

15 Harald Baier and / Winter Term 2011/ /20 Security Infrastructures (1/2) Standards for Security Infrastructures: ASN.1 X.509 and RFC 5280 Public Key Cryptrographic Standard Series

16 Harald Baier and / Winter Term 2011/ /20 Security Infrastructures (2/2) Revocation Mechanisms for X.509 certificates: Certificate Revocation Lists Online Certificate Status Protocol Revocation Trees Validation of Signatures and Validity Models

17 Harald Baier and / Winter Term 2011/ /20 Literature Literature Hinweise (in German)

18 Harald Baier and / Winter Term 2011/ /20 Literature Literature 1. A. Menezes, P. van Oorschoot, S. Vanstone: Handbook of Applied Cryptography, CRC Press, David Cooper et.al.: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, Request for Comments 5280, May BSI Technical Report TR-03110, 4. Slides

19 Harald Baier and / Winter Term 2011/ /20 Hinweise (in German) Literature Hinweise (in German)

20 Harald Baier and / Winter Term 2011/ /20 CAST-Förderpreis Hinweise (in German) 1. CAST = Competence Center for Applied Security Technology. 2. Förderpreis: Hoch-dotierter Sicherheitspreis (2011: EUR). Jährlich im November auf Nachwuchstag vergeben. Sieger 2009 Kategorie Bachelorarbeiten: Sebastian Abt, h da. 3. Workshops: Monatlich zu zentralen, aktuellen Themen. Internetkriminalität und Computerforensik (Dezember). PKI (Januar), Biometrie (September), URL:

21 Harald Baier and / Winter Term 2011/ /20 Hinweise (in German) Abschlussarbeiten, Hiwi-Tätigkeiten, Projektmitarbeit 1. Themenschwerpunkte der AG Internet-Sicherheit: Computerforensik. Botnetzdetektion in Hochverkehrsnetzen. Sicherheitsprotokolle für elektronische Reisedokumente. 2. In diesen Bereichen haben wir interessante Projekte: CASED, OpenC 3 S, Auftragsforschung, Mitwirkung im Rahmen einer Masterarbeit.... einer Hiwi-Tätigkeit.... eines Master-Projektes Systementwicklung. 4. Und später vielleicht als Mitarbeiter und Doktorand.

22 Harald Baier and / Winter Term 2011/ /20 Hinweise (in German) Abschlussarbeiten: Ausschreibungen 1. Ausschreibungen im Themenfeld IT-Sicherheit: fachgruppe-it-sicherheit.html 2. Aktuelle Masterarbeit zur Sicherheitsinfrastruktur elektronischer Reisedokumente.