Veranstaltungsplan

Woche	Datum	Thema	Seminar	Unterlagen
1	10/10	Orga und Übersicht	Entfällt
2	10/17	Grundlagen DFIR	Security Grundlagen
3	10/24	Security Principles	Fallbeispiel
4	10/31	Computer Forensik I	Fallbeispiel
5	11/7	Computer Forensik II	Fallbeispiel Abschluss
6	11/14	Malware	Workshop: Speicherakquise / Volatility
7	11/21	Memory-Forensik I	Volatility CTF 1 + 2	Bundesamt für Sichere Informationstechnik (BSI) am 24.11.2024 14-16 Uhr (online)
8	11/28	Memory-Forensik II	Volatility CTF 3
9	12/5	Netzwerkforensik	Workshop: Netzwerkforensik
10	12/12	Projektdefinition	Detect / Repel Attacks	Generalstaatsanwaltschaft (GSta) Frankfurt - Zentralstelle zur Bekämpfung der Internet- und Computerkriminalität (ZIT) (in Frankfurt)
11	12/19	Entfällt	Entfällt	Entfällt
12	1/16	Optional/Abschlussprojekt	Optional/Abschlussprojekt
13	1/23	Abschlussprojekt	Abschlussprojekt

Security Bücher

• Ross Anderson, Security Engineering, John Wiley & Sons, 2001. A book on security in real world systems.
• Jonathan Katz and Yehuda Lindell, Introduction to Modern Cryptography, CRC Press, 2007.
• Niels Ferguson, Bruce Schneier, and Tadayoshi Kohno, Cryptography Engineering, Wiley, 2010.
• Mark Stamp, Information Security: Principles and Practice, John Wiley & and Sons, 2006.
• Alfred Menezes, Paul van Oorschot, Scott Vanstone, Handbook of Applied Cryptography, CRC Press, 1997. This is a very comprehensive book. You can download this book online !
• Simson Garfinkel, Gene Spafford, Web Security, Privacy & Commerce, O'Reilly, 2002. It's hard to keep up with all the security software out there. But these authors do a good job documenting it all.
• Charlie Kaufman, Radia Perlman, Mike Speciner, Network Security: Private Communication in a Public World, 2nd Edition, Prentice Hall, 2002. The authors discuss network security from a very applied approach. There is a lot of discussion about real systems, all the way down to the IETF RFCs and the on-the-wire bit representations.
• Bruce Schneier, Applied Cryptography, 2nd Edition, John Wiley & Sons, 1996. This is the best book to read for an introduction to applied security and cryptography. There is much less math than the book by Menezes et al. The bibliography is very comprehensive too.
• Eric Rescorla, SSL and TLS: Designing and Building Secure Systems, Addison-Wesley, 2001. A book about the evolution, politics, and bugs in the development of SSL.
• Jakob Nielsen, Usability Engineering, Academic Press, 1993. There are a lot of non-intuitive GUIs out there for security products. Anyone making a security product for use by humans should learn about the principles of smart GUIs.
• Phillip Hallam-Baker, The dotCrime Manifesto: How to Stop Internet Crime, Addison-Wesley, 2008.
• Jonathan Katz, Yehuda Lindell, Introduction to Modern Cryptography, Chapman & Hall/CRC Press, 2007. This book contains a broad coverage of cryptography.

Konferenzen

Systems

• ACM Symposium on Operating Systems Principles (SOSP)
• USENIX Symposium on Operating Systems Design and Implementation (OSDI)
• USENIX Symposium on Networked Systems Design and Implementation (NSDI)

Security und Krypto

• IEEE Symposium on Security and Privacy (Oakland)
• USENIX Security Symposium
• ACM Computers, Communications, and Security conference (CCS)
• Network and Distributed System Security Symposium (NDSS)
• CRYPTO
• USENIX Workshop on Hot Topics in Security (HotSec)