The lecture teaches a basic introduction in different aspects of IT security. Typical security problems and security attacks as well as mechanisms to mitigate those are introduced. The lecture is intended for all students of information sciences’ curricula to get a basic IT security mindset that helps to better understand security problems. For interested students this lecture is the basis for further lectures on IT security. The employment in practice is emphasized, e.g. by inviting guest-lecturers with many years of experience in large IT infrastructures. In the exercises, which take place mainly in groups, the topics of the lecture get extended and deepened.

The topics of the lecture are among others

• Introduction in IT Security/ Basics of IT Security 
• Approach and Point of View of Attackers 
• Methods of Attackers to Gain Information 
• Risk Analysis 
• Access Control (Authentication, Authorizaton,...) 
• Operating System Security 
• Network Security 
• Basics of Cryptography 
• Security in Software Development 
• Security of Applications 
• Security of Web Applications 
• Organizational Security 
• Discovery of Security Problems 
• Security Tests 

Didactic approach: In the lecture the necessary technical foundations are taught, research in depth is guided on demand, and real, often large, case studies are presented. In the exercises the application of different aspects of the lecture are deepened and extended in 3 single and group tasks in our IT security lab infrastructure.

Effort for the student (ECTS-Breakdown):

• Preliminary talk: 1 h
• Lectures: 13,5 h
• Self Study (Exercises, Preparation Time for Written Exam): 59 h
• Written Exam: 1.5 h

Total: 75 hours (3 ECTS)