This lecture deals with theoretical and practical foundations of language-based security. We will
study the anatomy of attacks as well as a variety of defenses, which we will study and
discuss. Relevant aspects of some of the presented techniques will be practiced in the corresponding
exams.

• run time organization of programs
• code injection attacks and defenses
• buffer overflows und stack canaries
• ontrol-flow hijacking und control-flow integrity
• code re-use attacks and defenses
• return-oriented programming und software diversity
• non-control data attacks und data-flow integrity and data randomization
• recent results
• theoretical security of control-flow integrity
• trends in software diversity

• Vorlesungsbesuch (incl. Vor- und Nachbereitung): 35h
• Uebungsaufgaben: 30h
• Pruefungsvorbereitung und muendliche Pruefung: 10h

Beurteilung von Beispielen und mündliche Prüfung.