Masterstudium Business Informatics - Fakultät für Informatik, TU Wien

• Presentation of scientic and professional challenges, solution approaches, and their
evaluation
Syllabus: Security policies; Cobit, ISO 2700x; CERT operations; physical security; risk
management and analysis; cost and benet analysis; security models; system security;
vulnerabilities; identication, authentication, authorization, auditing; memory corruption,
buer Overows (stack, heap); return based programming; shellcode; Windows
security; security principles (Windows 95 to Windows 7); secure development life cycle,
security touchpoints; race conditions, TOC-TOE; computational complexity attacks; reverse
engineering and prevention; malicious code analysis; code obfuscation
Expected Prerequisites: Basic knowledge in the area of security
WIN/RSI - Recht und Sicherheit
Teaching and Learning Methods and Adequate Assessment of Performance: The module
is organized along lectures, recording and podcasts of interesting talks (e.g., tech talks,
CERIAS seminars), practical assignments by support of teaching assistants and an e-
learning system, small projects, case studies.
Courses of Module:
3.0/2.0 VU Software Security
3.0/2.0 VU Organizational Aspects of IT-Security
SIT/SC3 - Secure Systems Engineering
ECTS-Credits: 6.0
Summary: IT security engineering has become a critical element of the overall performance
of IT systems and IT projects. Enhancing eective functional engineering by
thorough security models, processes, and techniques is a major design and architecture
issue in several application elds. In the lectures of this module students will learn
advanced aspects of how to engineer secure systems and how to maintain security standards
in large and complex IT infrastructures. Topics of this module include advanced
aspects of planning, designing and implementing security mechanisms (e.g., Public Key
Infrastructures, web application security, ...), best practice examples of implementing
security in large IT infrastructures, and security testing in IT systems (test process,
penetration testing, ...). Students gain knowledge in IT security through fundamentals
and theory of advanced security aspects. Mechanisms are applied in practical lab work.
Furthermore, students are involved in security experiments, current research issues and
security competitions. Experiments in attacking and defending systems will be a didactic
method.
Learning Outcomes:
Knowledge:
• Conducting requirement studies, situation analysis, and risk identication for large
IT infrastructures
79