Formal Methods for Information Security (Summer Term 2010)

Lecturer:	Prof. Heiko Mantel
Format:	Lecture with exercises (V4 + Ü2)
Language:	English
Place and Time:	Tuesday 11:40–13:20 in S2|02/C120 (lecture/exercise)
	Thursday 09:50–11:30 in S2|02/C110 (lecture/exercise)
	Friday 13:30–15:10 in S2|02/C110 (exercise/lecture)
First Lecture:	Thursday, April 15, 2010

 

News

• 2010-07-28: The results of the final examination will be available at the MAIS notice-board in S2|02/E3 on Monday (noon). Participants can inspect their marked solutions in S2|02/E319 on Monday, August 2, 16:00–17:00.
• 2010-06-30: The results of the midterm examination are available at the MAIS notice-board in S2|02/E3. Participants can inspect their marked solutions in S2|02/E319 on Wednesday, July 7, 2010, 16:15–17:15.
• 2010-06-11: Exercise 09 will take place on June 21 (13:30–15:00) in S2|02/A213. On June 18 there will be no exercise and no lecture.
• 2010-04-26: Please register for the exam by April 30 with the Prüfungssekretariat.

Content

The course (see also the description of the module) gives an overview on formal approaches to:

• formal modeling of security-critical systems
• formal specification of security requirements
• formal security analysis of systems
• theoretical foundations for developing secure software by stepwise refinement and composition.

The topics covered include:

• introduction to formal methods for information security
• formal modeling and analysis of access control mechanisms
• formal modeling and analysis of information flow control
• formal modeling and analysis of security protocols
• formal modeling of trust relationships in distributed systems

Additional information for participants can be accessed using the password that is communicated during the first lecture.

Prerequisites

Knowledge of Computer Science and Mathematics, equivalent to the first four Semesters in the Computer Science Bachelor program, in particular

• ability to use formal languages and calculi
• and basic knowledge about logic.

Literature

Scientific articles (to be announced in the lecture) and slides of the lectures (will be available online after the lecture). Additionally, e.g., one of the following books:

• M. Bishop: "Computer Security", Pearson Education, 2003.
• D. Gollmann: "Computer Security", Wiley, 2000.
• D. Denning: "Cryptography and Data Security", Addison Wesley, 1982 (out of print, but still available on the internet)

Last modified on 22 May 2011.