192.082 Introduction to Security
This course is in all assigned curricula part of the STEOP.
This course is in at least 1 assigned curriculum part of the STEOP.

2021S, UE, 2.0h, 3.0EC
TUWEL

Properties

  • Semester hours: 2.0
  • Credits: 3.0
  • Type: UE Exercise
  • Format: Online

Learning outcomes

After successful completion of the course, students are able to discover and attack common software security vulnerabilities and to avoid common pitfalls during the development phase. The aim is to provide hands-on experience in the sort of attacks and protections found in the real world. More specifically, students will be given access to a safe environment where to interact with realistic applications containing ad-hoc vulnerabilities. The LVA offers practical exercises and follow-up materials to complement the topics presented during the Introduction to Security (VU) course.

Subject of course

Introduction

  • Python and bash scripting
  • Tools for binary and web exploit development

System Security

  • Buffer/stack overflow
  • Circumventing overflow mitigation techniques
  • Return-oriented programming (ROP)

Web Security

  • Server-side code injection techniques
  • Client-side injections and mitigation bypasses
  • Cross-site request forgery attacks and countermeasures
  • Browser side-channels

Network and Protocol Security

  • Cryptographic protocols

Teaching methods

In this semester the course is held in distance learning format. Video lectures covering the topics of the course will be published in TUWEL and we will offer Q/A sessions, in which students can ask questions regarding the contents of the lectures. Students are required to complete practical assignments through which they can assimilate the concepts learned during the course. The release schedule of videos and assignments can be found in TUWEL.

Mode of examination

Immanent

Additional information

ECTS Breakdown

3 ECTS = 75h

  • 8h   video tutorials and Q/A sessions
  • 67h self-study and projects development

Lecturers

Institute

Course dates

DayTimeDateLocationDescription
Tue14:00 - 16:0002.03.2021 https://tuwien.zoom.us/j/97506040156 (LIVE)Presentation of security courses offered at TU Wien (not specific to 192.082)
Tue10:00 - 12:0013.04.2021 Zoom Meeting (LIVE)Q/A System Security
Tue10:00 - 12:0004.05.2021 Zoom Meeting (LIVE)Q/A Web Security
Tue10:00 - 12:0008.06.2021 Zoom Meeting (LIVE)Q/A Communications Security

Examination modalities

Students are required to solve practical assignments, which are mostly focused on the implementation of the attacks presented during the course. The final grade of the course is based on reports in which students explain how they solved the proposed problems and what are the possible security countermeasures.

Course registration

Begin End Deregistration end
28.02.2021 00:01 15.03.2021 23:59 15.03.2021 23:59

Curricula

Study CodeObligationSemesterPrecon.Info
033 526 Business Informatics Mandatory electiveSTEOP
Course requires the completion of the introductory and orientation phase
033 532 Media Informatics and Visual Computing Mandatory elective
033 533 Medical Informatics Mandatory elective
033 534 Software & Information Engineering Mandatory elective
033 535 Computer Engineering Mandatory elective
880 FW Elective Courses - Computer Science Elective

Literature

No lecture notes are available.

Accompanying courses

Continuative courses

Language

English