Login
English
Nederlands
Advanced Topics in Security and Privacy
| Faculteit | Science and Engineering |
| Jaar | 2022/23 |
| Vakcode | WMCS001-05 |
| Vaknaam | Advanced Topics in Security and Privacy |
| Niveau(s) | master |
| Voertaal | Engels |
| Periode | semester I a |
| ECTS | 5 |
| Rooster | rooster.rug.nl |
| Uitgebreide vaknaam | Advanced Topics in Security and Privacy | ||||||||||||||||||||||||
| Leerdoelen | At the end of the course, the student is able to: 1) identify various security and privacy problems that are present in today's networked devices. 2) apply techniques (e.g. differential privacy, role-based access control) from security/privacy to address real-world situations/problems. 3) select a relevant security/privacy technique (e.g. taint analysis) for a given problem (e.g. mobile security) and argue for the choice of this technique. 4) evaluate the selected technique on relevant aspects (e.g. scalability, correctness). |
||||||||||||||||||||||||
| Omschrijving | Computers and networks are the backbones of our modern society. We are surrounded by smart devices (mobile phones, smart watches) that collect and process sensitive information more than ever. While we enjoy the benefits of these IT infrastructures/devices in almost every aspect of our lives (e.g. education, healthcare), these infrastructures pose many security and privacy risks. Data and/or digital assets can be stolen, a system can be manipulated to misbehave or a service can be made unavailable, to name a few. We need to be able to think like an adversary in order to be one step ahead and defend against ever sophisticated attacks. This course aims to provide an overview of some of the recent developments in security and privacy research in the form of lectures, presentations and course projects. The lectures will cover various data-centric security/privacy topics starting from traditional (but still valid!) areas of research including access control (RBAC, ABAC), Web security (CSRF, XSS) and mobile security. Then we will turn our attention to more privacy related topics such as privacy-enhancing technologies (e.g. differential privacy, homomorphic encryption), secure multi-party computing and perhaps more importantly machine learning security/privacy (backdoors, membership inferences). There will also be a dedicated lecture on the applications of blockchain technology (DApps) with an emphasis on security aspects (e.g. smart contract security, verifiable credentials, reentrancy attacks). The overall goal of the course is to equip students with the state-of-the-art information on the chosen topics while providing them an opportunity for a hands-on experience. The course will proceed in an interactive manner and promote constructive discussions. Students will be asked to make a presentation over a research paper they choose (a list will be provided a priori) and they will work on a practical course project within groups. |
||||||||||||||||||||||||
| Uren per week | |||||||||||||||||||||||||
| Onderwijsvorm | Bijeenkomst (S), Hoorcollege (LC), Opdracht (ASM), Practisch werk (PRC) | ||||||||||||||||||||||||
| Toetsvorm |
Opdracht (AST), Practisch werk (PR), Presentatie (P)
(The final grade (F) is calculated as follows: if Pr>=5 and Pa>=5 then F=(Pr * .5 + Pa * .25 + As * .25) else F=Min(5, (Pr * .5 + Pa * .25 + As * .25)) where Pr is Project, Pa is Paper and As is the lab assignments.) |
||||||||||||||||||||||||
| Vaksoort | master | ||||||||||||||||||||||||
| Coördinator | F. Turkmen, PhD. | ||||||||||||||||||||||||
| Docent(en) | F. Turkmen, PhD. | ||||||||||||||||||||||||
| Verplichte literatuur |
|
||||||||||||||||||||||||
| Entreevoorwaarden | The course assumes basic knowledge of security and thus recommends the course unit "Information Security" (WBCS004-05) to be followed earlier in the Computing Science minor. However, this is not a strict requirement since relevant reading material will be provided for self-study. | ||||||||||||||||||||||||
| Opmerkingen | This course has limited enrollment: - CS students can always enter the course, regardless of whether the course is mandatory for them or not. - The number of enrolments for other non-CS students is limited. These students need to meet the course prerequisite requirements as mentioned on Ocasys. Priority is given to students for which the course is an official elective (see list below). - An exception can be made for exchange students, if they have a CS background: please contact the FSE International Office. See here for more info about the enrollment procedure. |
||||||||||||||||||||||||
| Opgenomen in |
|