This class covers advanced aspects of information security and
organizational as well as technical aspects of security to raise the
security level of IT projects.
Students will gain profound knowledge of threat modeling, risk and
impact analyses and their importance to secure system design.

• Threat Modeling (e.g. STRIDE, DREAD)
• Security Patterns
• Access Control Models
• Security Policies
• Network Security and aspects of wireless technologies
• Web Application Security
• XML Security
• Advanced Aspects of IT Security of Applications
• Mobile Security
• Secure Architectures
• Forensics
• Security of VoIP

Didactic approach: In the lecture the necessary technical foundations are taught, research in depth is guided on demand, and real, large case studies are presented. In the exercises the application of different aspects of the lecture are deepened and extended in 3 single and group tasks in our IT security lab infrastructure.

Effort for the student (ECTS-Breakdown):

Preliminary talk: 1 h
Lectures: 13,5 h
Self Study (Exercises, Preparation Time for Written Exam): 59 h
Written Exam: 1.5 h

Total: 75 hours (3 ECTS)