Online Materials

Moodle course (registration credentials will be announced in the first lecture).

Content

When talking about security of IT systems, best-practices for the development of secure systems or mechanisms for the protection of systems against illegal access of valuable assets play a major role. With this focus systems are called "secure" when the security appears substantiated by the used design processes and the deployed security mechanisms. This focus does not allow an objective assessment of the security properties the IT system does actually satisfy. To enable such an assessment, it is a necessity to make the desired security properties explicit with the necessary level of precision, to provide a view on the system appropriate to analyze the security of a system wrt. the desired requirements and to come up with analysis techniques to ease the process of judging the security of a system.

The course gives an overview on formal approaches to:

• formal modeling of security-critical systems
• formal specification of security requirements
• formal security analysis of systems
• theoretical foundations for developing secure software by stepwise refinement and composition.

The topics covered include:

• introduction to formal methods for information security
• formal modeling and analysis of access control mechanisms
• formal modeling and analysis of information flow control
• formal modeling and analysis of security protocols

Prerequisites

Knowledge of Computer Science and Mathematics, equivalent to the first four Semesters in the Computer Science Bachelor program, in particular

• ability to use formal languages and calculi
• and basic knowledge about logic.

Literature

Will be announced in the lecture.

Last modified on 17 April 2022.