Sommersemester 25

Die Vorlesung Cybersicherheit (Cybersecurity) bietet einen breiten Einstieg in das Thema der IT-Sicherheit. Es werden grundlegende Konzepte der Kryptographie behandelt, ohne die eine sichere Kommunikation im Internet oder die Integrität moderner Systeme nicht möglich ist. Neben den kryptographischen Grundlagen bietet die Vorlesung einen Überblick über die verschiedenen Bereiche der Cybersicherheit. Hierzu gehört die Netzwerksicherheit (Wireless Security, Websecurity) und Software Security (Malware, Exploits, Trusted Computing). Die Studierenden haben am Ende der Veranstaltung einen guten Überblick über die Themenbereiche moderner IT-Sicherheit, sie verstehen die grundlegenden Konzepte für den Aufbau sicherer Kommunikation und Integritätsprüfung von Software. Zudem sind Sie in der Lage ihr Wissen auf andere Themenbereiche zu übertragen. Dadurch können die Studierenden beurteilen, ob ein System im ausreichenden Maße von potentiellen Angreifern geschützt ist.

schriftliche Klausur

• Montag (Zeitfenstermodell) 16 bis 18 Uhr SH601
• Mittwoch 12 bis 14 Uhr R14 R02 B07
• Donnerstag 14 bis 16 Uhr R11 T00 D03 (Englisch)

Die Übungen starten erst nach der ersten Vorlesung.

In dieser Vorlesung erhalten die Studierenden einen Überblick über Sicherheitsaspekte in Kryptowährungen und Blockchain Technologien mit Fokus auf Smart Contract Security. Die Vorlesung umfasst folgende Themenschwerpunkte:

• Historie von digitalen Währungen
• Datenstruktur der Blockchain und Merkle Bäume
• Grundprinzipien von Bitcoin: Double-Spending Problem, Proof-of-Work Consensus Protokoll, Digitale Signaturen, Transaktionen
• Grundprinzipien von Ethereum: Smart Contracts, Gas Mechanismus, Proof-of-Stake Consensus Protokoll
• Smart Contract Schwachstellen Analyse und Angriffstechniken
• Sichere Entwicklung und Härtung von Smart Contracts
• Smart Contract Programmiersprachen (Solidity, Rust) und Compiler
• Alternative Kryptowährungen und Smart Contract Technologien (z.B. Solana)
• Blockchain Technologien aus der industriellen Forschung am Beispiel von HyperLedger Fabric

• A. Narayanan, J. Bonneau, E. Felten, A. Miller, S. Goldfeder: Bitcoin and Cryptocurrency Technologies: A Comprehensive Introduction, Princeton Univers. Press, 2019
• A. Antonopoulos: Mastering Bitcoin: Unlocking Digital Cryptocurrencies, O'Reilly Media, 2nd edition, 2017
• L. Lantz, D. Cawrey: Mastering Blockchain: Unlocking the Power of Cryptocurrencies, Smart Contracts, and Decentralized Applications, O'Reilly Media, 2020

Theoretische und praktische Übungen zur Vorlesung Sicherheit in Kryptowährungen und Blockchain Technologien

Hinweis für CASA Doktoranden und Duisburger Studierende: Den Zugangsschlüssel zur Einschreibung in den Moodle-Kurs erhalten Sie während der ersten Vorlesung sowie auf Anfrage per E-Mail.

The seminar in the summer term 2025 will be on hot topics in computer security based on two recent top security conferences: Network and Distributed System Security (NDSS) Symposium 2025 and the ACM Conference on Computer and Communications Security (CCS) 2024. This seminar series aims at allowing students to explore computer security research presented on top conferences, i.e., taking a deep dive in recent research and gaining insights in the computer security research community.

Please note that this seminar will be in English: students are required to write their seminar work in English and give an oral presentation in English.

There will be 4 mandatory meetings throughout the semester. Every meeting is mandatory; students cannot pass the seminar if they miss any of these meetings. The first meeting is the kick-off meeting on Friday, April 11th at 10 am in S-GW 009. The dates of the three remaining meetings will be announced in the kick-off meeting.

The procedure is as follows:

1. Students join the kick-off meeting on Friday, 11th April at 10am in S-GW 009 (no pre-registration is required).
2. Until Friday, 18th April EOD students select three sessions of the two conferences. Students provide a ranking preference of the selected sessions and submit their sessions.
3. Next, the seminar organizers assign one session to each student.
4. Meeting 2 (beginning of May): students read the papers of their assigned session and pick two papers they would like to choose for their seminar work. During the meeting, they provide a summary of the papers in their sessions and argue their motivation for their selection of the two papers.
5. Meeting 3 (beginning of June): In the last weeks, the students have clearly understood their papers and read related work. In this meeting, the students present the structure of their seminar work and provide insights on what they learned from the two papers. It is especially required to start a balanced discussion of the research results presented in this paper. All the students engage in a discussion on the papers helping each student to determine the key points which need to be considered in the seminar work.
6. Meeting 4 (mid of July): Oral presentation of the seminar work and submission of the seminar work.

Die Studierenden lernen Methoden des wissenschaftlichen Arbeitens und sind in der Lage eigenständig ein Themengebiet auf Basis von wissenschaftlichen Veröffentlichungen zu erarbeiten. Durch die Seminararbeit lernen die Studierenden ein wissenschaftliches Thema zusammenzufassen sowie wissenschaftliche Publikationen zu systematisieren und bewerten. Die Studierenden üben die Präsentation über ein wissenschaftliches Themengebiet in Form der Abschlusspräsentation.

The bachelor project in the summer term 25 is on hot topics in computer security based on the USENIX Security Symposium 2024 and CCS 2024. Both conferences are top-tier security conferences that provide a dedicated evaluation process on artifacts that are submitted in addition to the scientific paper. Our course allows students to do a bachelor project within the scope of computer security research published on top conferences, i.e., taking a deep dive in recent research implementation projects and evaluation data.

Please note that this course will be in English: students are required to write their project report in English and give an oral presentation in English.

We will only be accepting 10 students for the Bachelor project.

There will be 4 mandatory meetings throughout the semester. Every meeting is mandatory; students cannot pass the bachelor project if they miss any of these meetings. The first meeting is the kick-off meeting on Monday, April 14th at 10:00 in S-GW 009. The dates of the remaining meetings will be fixed in April.

The procedure is as follows:

1. Students join the kick-off meeting on Monday, 14th April at 10:00 in S-GW 009 (no pre-registration is required).
2. Our chair will publish a selected list of artifacts (in Moodle) from above conferences.
3. Until Friday, 18th April EOD students select and submit three artifacts from that list. Students also provide a ranking preference of the selected artifacts.
4. Next, the course organizers assign one artifact to each student.
5. Before the next meeting, students read the paper and get familiar with the artifact. Students should also test the artifacts, trying to partially reproduce the result of the paper. Reach out to your supervisor if you need help in getting the artifact running. After running the artifact, the students think of ideas to advance the artifacts or concepts of the paper in useful directions.
6. Meeting 2 (mid-May): During the meeting, students provide a summary of the paper and also provide a very general overview of what the artifact includes: which components have been implemented? If applicable, what kind of evaluation data includes the artifact? What hasn't been provided in the artifact? Further, the students propose the ideas that they aim to implement throughout the project.
7. Between Meeting 2 and 3, the students flesh out their vision for this project and start implementing. If they are stuck, they reach out to their supervisor.
8. Meeting 3 (end of June): The students present their detailed plan and ongoing implementation efforts. Additionally, the students lay out how they plan to evaluate their artifact additions.
9. Meeting 4: (end of July): Oral presentation of the project work and submission of the project paper.

Please note that the topics mentioned above often deal with system-level software and hardware aspects (operating system code, low-level code such as C code, Ethereum bytecode, and x86 or ARM assembly instructions). We recommend choosing the Bachelor project "Secure Software Systems" only if you are willing to deal with system-level programming techniques, meaning that you are ready to learn and apply these techniques within the scope of the project.

Unsere Themen richten sich an aktuellen Forschungsthemen der IT-Sicherheit (insbesondere Systemsicherheit). Die besten IT-Sicherheitstagungen (A*-Konferenzen) sind nachfolgend aufgeführt. Über das Uni-Netzwerk können Sie für alle der genannten Konferenzen die wissenschaftliche Artikel (die sogenannten Papers) kostenlos herunterladen und sich die Vortragsvideos anschauen. Beachten Sie, dass für dieses Bachelorprojekt die Konferenz USENIX Security insbesondere von Relevanz ist. Die anderen Konferenzen können aber für Hintergrundinformationen zum Thema Computer Security gerne herangezogen werden.

• IEEE Security and Privacy Symposium (IEEE S&P)
• ACM Conference on Computer and Communications Security (CCS)
• USENIX Security Symposium
• ISOC Network and Distributed System Security Symposium (NDSS)