Wahlbereiche

Mobile communications and wireless networking technology has seen a thriving development in recent years. Driven by technological advancements as well as application demands, various classes of communication networks emerged. This includes sensor networks, ad hoc networks, and cellular networks, each of which class represents a solution to important chapters in the mobile and wireless communications challenge.

Currently, we observe that the fixed, mainly infrastructure based networks are complemented and enhanced with infrastructure-less (ad-hoc) networking structures to form novel communication networks. At the same time users get more and more mobile and nomadic, they demand the ability to use applications anytime and anywhere, posing additional resource demands onto the network while on the move and changing the nature of applications. Obviously this gives rise to several challenging questions, which have to be solved first. Not only feasible applications and end-systems have to be developed but also smart network technology has to be devised.

The lecture addresses the above outlined problem scope. The characteristics/principles underlying the problem are discussed in detail and practical solutions are presented. Hereby our focus is on the network layer, which is often regarded as the glue of communication systems. In addition to describing the state of the art in technology we discuss actual research problems and learn about methodologies to approach such problems systematically.

Objectives

The integrated lecture Protection in Networked Systems — Trust, Resilience, and Privacy covers the topics of computational trust, resilient and anonymous networks, and collaborative defense mechanisms. By attending this course, the students will be able to understand the problems and solutions in the context of networked systems. The course content will consider the concept of End-to-End systems emphasizing on users, devices, networks, and applications or services.

Content

• Protection in Networked Systems: background, motivation, challenges

• Trust (Computational Trust): models and mechanisms

• Trust (Computational Trust): application in PKI, Cloud Computing, Reputation Systems, and Web Services

• Trust: regret management and device comfort

• Privacy: privacy definitions, models, data anonymity, communication anonymity

• Privacy & Trust: privacy-preserving trust models, mechanisms, and application to IDM

• Security & Economics

• Resilience: models, network intrusion detection systems, collaborative intrusion detection systems, honeypots

• Resilient networks

Literature

• Trust and Reputation for Service-Oriented Environments: Technologies For Building Business Intelligence And Consumer Confidence, Elizabeth Chang, Tharam Dillon, and Farookh K. Hussain, 374 pages, 2006. ISBN: 978-0-470-01547-6
• Detailing Reviews and Ratings for Trust-Enhanced Composition, Florian Volk, 272 pages, 2015, ISBN: 9783736991668 (print), 9783736981669 (e-book)
• On anonymity in an electronic society: A survey of anonymous communication systems, Matthew Edman and Bülent Yener, ACM Computing Surveys, Vol. 42,  Issue 1, 2009.
• Taxonomy and Survey of Collaborative Intrusion Detection, Emmanouil Vasilomanolakis, Shankar Karuppayah, Max Mühlhäuser, Mathias Fischer, ACM Computing Surveys, Vol. 47 Issue 4, 2015.
• Selected book chapters and scientific publications

Prerequisites

Knowledge of IT Security and Mathematics according to 1-4 semester of B.Sc. Computer Science

In this seminar, recent developments on the formal foundations of computer security will be presented and discussed. The seminar will be based on recent research articles covering selected foundational aspects of computer security. Each article will be presented by one participant of the seminar and will then be discussed intensely by the entire group of participants.

Formal foundations of computer security are necessary to clarify desirable security guarantees and possible security threats. For instance, formal security models can be used to capture security requirements precisely and can then serve as a reliable basis for verifying whether these requirements are met. Formal foundations of security can also serve as a basis for establishing security by design, including a precise definition of security requirements, a component-based development of secure systems, and the stepwise refinement of high-level system specifications to more-detailed specifications, ultimately to secure program code.

•     composition, abstraction and refinement in computer security,
•     information-flow security and information-flow control,
•     language-based security,
•     security models and properties,
•     secure usage and usage control,
•     quantitative security, and
•     verifiable security.

The Seminar as well as the Advanced Seminar on Networking, Security, Mobility, and Wireless Communications cover current research in the given topic areas. Under supervision of the tutors, the seminar includes studying, critically analyzing and discussing, summarizing, and presenting selected research articles. Deliverables are a short presentation, a final presentation, and a seminar paper. The Advanced Seminar additionally emphasizes on the entire research process.

Please use tk1@tk.informatik.tu-darmstadt.de to contact the lecturers.