Shweta Shinde: Catalogue data in Autumn Semester 2024 |
| Name | Prof. Dr. Shweta Shinde |
| Field | Computer Science |
| Address | Dep. Informatik ETH Zürich, CAB F 71.2 Universitätstrasse 6 8092 Zürich SWITZERLAND |
| Telephone | +41 44 633 09 88 |
| shweta.shinde@inf.ethz.ch | |
| URL | https://shwetashinde.org/ |
| Department | Computer Science |
| Relationship | Assistant Professor (Tenure Track) |
| Number | Title | ECTS | Hours | Lecturers | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 252-1414-00L | System Security  | 7 credits | 2V + 2U + 2A | S. Capkun, S. Shinde | |||||||||||||||||||||||||||||
| Abstract | The first part of the course covers general security concepts and hardware-based support for security. In the second part, the focus is on system design and methodologies for building secure systems. | ||||||||||||||||||||||||||||||||
| Learning objective | In this lecture, students learn about the security requirements and capabilities that are expected from modern hardware, operating systems, and other software environments. An overview of available technologies, algorithms and standards is given, with which these requirements can be met. | ||||||||||||||||||||||||||||||||
| Content | The first part of the lecture covers hardware-based security concepts. Topics include the concept of physical and software-based side channel attacks on hardware resources, architectural support for security (e.g., memory management and permissions, disk encryption), and trusted execution environments (Intel SGX, ARM TrustZone, AMD SEV, and RISC-V Keystone). In the second part, the focus is on system design and methodologies for building secure systems. Topics include: common software faults (e.g., buffer overflows, etc.), bug-detection, writing secure software (design, architecture, QA, testing), compiler-supported security (e.g., control-flow integrity), and language-supported security (e.g., memory safety). Along the lectures, model cases will be elaborated and evaluated in the exercises. | ||||||||||||||||||||||||||||||||
| Competencies |
| ||||||||||||||||||||||||||||||||
| 252-4601-00L | Current Topics in Information Security  The deadline for deregistering expires at the end of the second week of the semester. Students who are still registered after that date, but do not attend the seminar, will officially fail the seminar. | 2 credits | 2S | S. Capkun, K. Paterson, S. Shinde | |||||||||||||||||||||||||||||
| Abstract | The seminar covers various topics in information security: security protocols (models, specification & verification), trust management, access control, non-interference, side-channel attacks, identity-based cryptography, host-based attack detection, anomaly detection in backbone networks, key-management for sensor networks. | ||||||||||||||||||||||||||||||||
| Learning objective | The main goals of the seminar are the independent study of scientific literature and assessment of its contributions as well as learning and practicing presentation techniques. | ||||||||||||||||||||||||||||||||
| Content | The seminar covers various topics in information security, including network security, cryptography and security protocols. The participants are expected to read a scientific paper and present it in a 35-40 min talk. At the beginning of the semester a short introduction to presentation techniques will be given. Selected Topics - security protocols: models, specification & verification - trust management, access control and non-interference - side-channel attacks - identity-based cryptography - host-based attack detection - anomaly detection in backbone networks - key-management for sensor networks | ||||||||||||||||||||||||||||||||
| Literature | The reading list will be published on the course web site. | ||||||||||||||||||||||||||||||||
| 263-0009-00L | Information Security Lab | 8 credits | 2V + 1U + 3P + 1A | S. Shinde, D. Basin, S. Capkun, K. Paterson | |||||||||||||||||||||||||||||
| Abstract | This InterFocus Course will provide a broad, hands-on introduction to Information Security, introducing adversarial thinking and security by design as key approaches to building secure systems. | ||||||||||||||||||||||||||||||||
| Learning objective | This course will introduce key concepts from Information Security, both from attack and defence perspectives. Students will gain an appreciation of the complexity and challenge of building secure systems. | ||||||||||||||||||||||||||||||||
| Content | The course is organised in three-week segments. In each segment, a new concept from Information Security will be introduced. The overall scope will be broad, including cryptography, protocol design, system security, and privacy. | ||||||||||||||||||||||||||||||||
| Lecture notes | Will be made available during the semester. | ||||||||||||||||||||||||||||||||
| Literature | Paul C. van Oorschot, Computer Security and the Internet: Tools and Jewels. Dan Boneh and Victor Shoup, A Graduate Course in Applied Cryptography. | ||||||||||||||||||||||||||||||||
| Prerequisites / Notice | Ideally, students will have taken the D-INFK Bachelors course “Information Security" or an equivalent course at Bachelors level. | ||||||||||||||||||||||||||||||||
| Competencies |
| ||||||||||||||||||||||||||||||||