News
Status Update: Grades still CANNOT be entered in LSFWritten on 04.10.18 by Stefan Nürnberger Unfortunately the situation that grades cannot be entered in LSF is still true as of today. They wanted to fix the issue more than 3 weeks ago but apparently I cannot not enter your grades in LSF. I'm sorry about that but it's not my fault. The HIZ is working on that matter and I try to urge them… Read more Unfortunately the situation that grades cannot be entered in LSF is still true as of today. They wanted to fix the issue more than 3 weeks ago but apparently I cannot not enter your grades in LSF. I'm sorry about that but it's not my fault. The HIZ is working on that matter and I try to urge them again. I'll keep you posted about the status.
|
Exam Grades...Written on 20.08.18 by Stefan Nürnberger *Drumroll* .....
...are in your CMS account! The exam inspection will take place on September 04, 1pm - 3pm at CISPA seminar room 0.07. |
Exam LocationWritten on 16.08.18 by Simeon Hoffmann Just in case it was unclear: the exam will be written in the CISPA lecture hall, hence in the same room the lecture took place. |
Solutions for Exercise Sheet 5 and 6Written on 05.08.18 by Finn Hermeling A sample solution for sheets 5 and 6 has been uploaded in the Materials section. If you want to take part in the exam, do not forget to register in the LSF in time. |
Tomorrow: Q&A / Please Return HardwareWritten on 15.07.18 by Stefan Nürnberger Tomorrow will be Q&A session in the lecture slot (10am). This is a good chance to ask questions. Please also remember to bring all the hardware that you still have as this is the last possibility to return it. |
Office hours tomorrow, July 12th and hardware return reminderWritten on 11.07.18 by Simeon Hoffmann As we will most likely not finish correction until the office hour tomorrow, we decided to move the exercise discussion to Thursday next week (July 19th). There will be a regular office hour tomorrow to ask questions.
Also, a short reminder that the hardware needs to be returned at the latest… Read more As we will most likely not finish correction until the office hour tomorrow, we decided to move the exercise discussion to Thursday next week (July 19th). There will be a regular office hour tomorrow to ask questions.
Also, a short reminder that the hardware needs to be returned at the latest on Monday, July 16th. If no one in your team is able to make it, please hand it back during the office hours tomorrow. If both dates do not fit, write a Mail to Simeon with an appointment suggestion (before July 16th). |
Yet another small updateWritten on 10.07.18 by Simeon Hoffmann There has been yet another small update concerning the current exercise sheet. A small part of exercise 1b) has been reformulated. |
Another small fixWritten on 10.07.18 by Simeon Hoffmann Another problem was brought to our attention concerning the current exercise. It is fixed now, if you were already working on it, you might want to redownload the exercise sheet. |
Small fix for current exerciseWritten on 10.07.18 by Simeon Hoffmann It has been brought to our attention that the code skeleton we provided is not entirely functional the way it is described to be. This is now fixed. If you are working on the bonus exercise, you may want to redownload. |
|
Written on 09.07.18 by Simeon Hoffmann The new exercise is now online in the CMS. In case you downloaded the premature version earlier, please redownload. Also, please return your hardware next week on Monday. If no one of your team is able to make it, please return your hardware during the office hours on Thursday between 4 and 6 pm.… Read more The new exercise is now online in the CMS. In case you downloaded the premature version earlier, please redownload. Also, please return your hardware next week on Monday. If no one of your team is able to make it, please return your hardware during the office hours on Thursday between 4 and 6 pm. If neither appointment fits for you, please write an email to Simeon with another time slot that fits your schedule (the time slot needs to be before Monday, July 16th). Please note that we will not accept incomplete hardware sets ("We'll bring the rest later.") or late returns. The slides for last week will be uploaded later today. Note that as announced in the lecture last week and this week, slides for today's lecture will not be published. Consequently, they are not relevant for the exam and the exercises. |
Office hour room change and small reminderWritten on 05.07.18 by Simeon Hoffmann Due to the unavailability of our usual room for the office hour, it takes place in room 2.22 today.
Also small reminder that you may not use command line tools to measure the integrity of your files in the current task. You may also not use your C code as a wrapper to the already existing… Read more Due to the unavailability of our usual room for the office hour, it takes place in room 2.22 today.
Also small reminder that you may not use command line tools to measure the integrity of your files in the current task. You may also not use your C code as a wrapper to the already existing programs (like for example the preexisting flushcontext program in the TSS). This approach will not yield any points. You may of course look at the source code of such programs and implement your task similarly. Have fun! |
Grading updateWritten on 02.07.18 by Simeon Hoffmann We decided to change the grading for the last exercise of exercise 4. All solutions proposing DH-key exchange are now also accepted. Points have been updated. |
Extra Office hourWritten on 29.06.18 (last change on 29.06.18) by Finn Hermeling We were told that some of you asked for help and missed the office hour in the lecture hall. We therefore offer an extra small office hour tomorrow, friday the 29.7.18, between 4:15pm and 5:00pm in E9.1 2.21. As a reminder, the office hours on thursdays after a submission was closed are held in the… Read more We were told that some of you asked for help and missed the office hour in the lecture hall. We therefore offer an extra small office hour tomorrow, friday the 29.7.18, between 4:15pm and 5:00pm in E9.1 2.21. As a reminder, the office hours on thursdays after a submission was closed are held in the lecture hall and recap the solution of the last exercise sheet. |
Small updateWritten on 28.06.18 by Simeon Hoffmann We issued a small update on the exercise sheet that rewrites passages that were not clear. Also, in case you missed it, points for the most recent exercise have been uploaded. |
Hardware exchangeWritten on 19.06.18 by Simeon Hoffmann We will hand out new hardware in the lecture on Monday for the new exercise, so please make sure that at least one person will be claiming the new hardware. In return, we will collect the ESP32 controller that you got for the exercise this week, so please bring it to the lecture on Monday. |
TPM Lectures onlineWritten on 18.06.18 by Stefan Nürnberger The last two TPM lectures (by Sven Bugiel) are now online as PDF slides. Additionally, I attached the handwritten notes giving a motivation and the example commands from today. |
Exercise 4Written on 05.06.18 by Finn Hermeling The fourth exercise sheet is now online. You must submit your solution until June 25., 9:59am. Even though you have three weeks to complete the tasks, the first task is tricky. As always you can ask questions via E-Mail, the forum or in the office hours. Note that this office hour on thursday we… Read more The fourth exercise sheet is now online. You must submit your solution until June 25., 9:59am. Even though you have three weeks to complete the tasks, the first task is tricky. As always you can ask questions via E-Mail, the forum or in the office hours. Note that this office hour on thursday we will discuss the last exercise sheet in the Lecture hall, but we are also happy to answer questions concerning the actual exercise sheet. If you want to try out your ESP's WLAN configuration, you can do so in the students working room in the second floor. We installed a router for you. |
New hardwareWritten on 04.06.18 by Simeon Hoffmann We handed out new hardware today in the lecture. If no member of your team is able to make it, you will be able to fetch it in the office hour of this week. We expect you to own a functional micro USB cable for the new hardware. If neither member of your team does have such a cable, please write a… Read more We handed out new hardware today in the lecture. If no member of your team is able to make it, you will be able to fetch it in the office hour of this week. We expect you to own a functional micro USB cable for the new hardware. If neither member of your team does have such a cable, please write a message to the tutors. We do not have many of these, so please only take a cable from us if there is no other way for you to get one. |
Fix concerning current sheet exercise 2Written on 28.05.18 by Simeon Hoffmann It has brought to our attention that there was a small mistake in the provided code for exercise 2. This is now fixed on the hardware and the updated sheet is online. You may want to check if your attack still works, but if you implemented a correct bufferoverflow as stated in the exercise, nonthing should change. |
Re: Building accessWritten on 22.05.18 by Simeon Hoffmann Remember to send us a mail with your UDS card number as described in the previous post if you want access to the CISPA building. Deadline will be thursday morning at 10 am. |
Lecture Slides & Recording availableWritten on 22.05.18 by Stefan Nürnberger The lecture slides and the recording (video with my voiceover) is now available. Have a look: https://cms.cispa.saarland/emsec/ |
Exercise 3Written on 21.05.18 (last change on 21.05.18) by Simeon Hoffmann The third exercise sheet is now online. The lecture will be uploaded later today. Information for exerise 1: You need to be in the same /24 subnet ip range as the arduino, hence any 192.168.1.x ip should do. Also, make sure that the ID of the CAN frame you send to the arduino is exactly 3… Read more The third exercise sheet is now online. The lecture will be uploaded later today. Information for exerise 1: You need to be in the same /24 subnet ip range as the arduino, hence any 192.168.1.x ip should do. Also, make sure that the ID of the CAN frame you send to the arduino is exactly 3 characters long. There was a small but decisive fix in the exercise. You may want to redownload the exercise. |
Exercise 2 points are online, Office hour changes and building accessWritten on 16.05.18 by Simeon Hoffmann The points for exercise 2 are online now. The overall schedule of the course changes a little bit: instead of office hour every week, we will offer a tutorial in the week after you submitted an exercise in the office hour slot. In this tutorial, we will discuss the solution of the most recent… Read more The points for exercise 2 are online now. The overall schedule of the course changes a little bit: instead of office hour every week, we will offer a tutorial in the week after you submitted an exercise in the office hour slot. In this tutorial, we will discuss the solution of the most recent exercise sheet. This tutorial takes place in the lecture hall. This new schedule starts immediately, hence there will be a tutorial tomorrow at 4 pm in the lecture hall. As you might need building access for future exercises again, please send your card id (the number in the top left of your UDS card) in a mail to one of the tutors if you do not have building access already. Make sure that it is a 17-digit number, as the older cards (less digits) are not supported for granting building access. If you have such an old card, you can change it to the newer model at campus center. It should be free of charge if you mention that you need access to the CISPA building. |
Exercise 2 and lecture next weekWritten on 11.05.18 by Simeon Hoffmann Exercise 2: We acknowledge that the second task from the current exercise is out of scope for this course (too hard). Hence we change the evaluation of this exercise: you will get up to full points for this exercise if you can present an approach that will lead you to the result and that shows that… Read more Exercise 2: We acknowledge that the second task from the current exercise is out of scope for this course (too hard). Hence we change the evaluation of this exercise: you will get up to full points for this exercise if you can present an approach that will lead you to the result and that shows that you understood the problem. You DO NOT need the secret to receive full points for this exercise. However if you managed to extract the secret and can present how you did it, you will be awarded 5 bonus points. Lecture next week: Next week on monday (a holiday), there will be a video upload with a new lecture and a new exercise sheet. You have the full two weeks to work on this exercise sheet. |
Replacement office hourWritten on 10.05.18 (last change on 11.05.18) by Simeon Hoffmann As there seem to be a lot of issues concerning the current exercise sheet and today is a holiday, there will be a replacement office hour tomorrow at 4 pm. It will take place in the usual room, room 2.21 in the CISPA building. |
Exercise 2Written on 01.05.18 by Simeon Hoffmann The second exercise sheet is now online. Read the instructions carefully and hand in your solution until May 14, 9:59 am (before the lecture). |
Office hoursWritten on 20.04.18 by Simeon Hoffmann From now on, there will be office hours on thursdays from 4 pm to 6 pm in room 2.21 in E 9 1. Feel free to come if you have problems with your project or questions concerning the lecture. |
Change of Lecture Hall for Next Monday (April 23)Written on 19.04.18 by Stefan Nürnberger Next Monday (April 23), we'll be in the CISPA Presentation Room (Room 0.01 ground floor) instead of the big lecture hall.
See you then! |
Lecture Slides and Exercise 01 (Microcontrollers & Basics) is onlineWritten on 16.04.18 by Stefan Nürnberger The lecture slides from today's lecture are online: https://cms.cispa.saarland/emsec/dl/3/Lecture-01-Microcontrollers.pdf For the exercise, have a look at the Exercise page. REMINDER: Pick-up of hardware tomorrow, April 17, 16:00 in the CISPA lecture hall |
Embedded Security @ Semester KickoffWritten on 05.04.18 by Stefan Nürnberger Embedded Security will be presented at the Semester-Kick-Off-meeting (Monday, April 9th, 2018) in "Günter-Hotz-Lecture-Hall", building E2 2, 4.30 p.m. |
Embedded Security
Embedded Security ("Emsec") takes place weekly, every Monday 10:00 to 11:30 am in the CISPA Lecture Hall.
It is accompanied by bi-weekly practical exercises that should be done in groups of two students.
Time Table Overview
| Date | Lecture | Exercise |
| April 16 | Introduction, Organisational Topic: Microcontrollers CISPA Lecture Hall |
Exercise #1 Microcontrollers Until April 30 at 9:59 |
| April 23 |
Topics: Side Channels, |
|
| Exercise #2 {Side | Covert} Channels Until May 14 at 9:59 |
||
| May 21 |
Topic: Automotive Security Video Recording |
Exercise #3 |
| May 28 | Topic: Wireless Security CISPA Lecture Hall |
|
| June 04 |
Topic: Secure Software Architectures |
Exercise #4 Until June 25 at 9:59 |
| June 11 | Guest Lecture TPM 1/2 TPM Introduction (with Motivation) (Sven Bugiel) CISPA Lecture Hall |
|
| June 18 | Guest Lecture TPM 2/2 TPM Storage (with example) (Sven Bugiel) CISPA Lecture Hall |
|
| June 25 | Guest Tutorial TPM (Dhiman Chakraborty) CISPA Lecture Hall |
Exercise #5 Until July 09 at 9:59 |
| July 02 | Security by Design (Video Recording) CISPA Lecture Hall |
|
| July 09 | Case Study: Reverse Engineering of a Car (No Slides) CISPA Lecture Hall |
Exercise #6 -> Until July 16 at 9:59 |
| July 16 | Live Q&A CISPA Lecture Hall |
Hand in Exercise #6
|
| Aug 16 | EXAM (CISPA Lecture Hall) |
10:00am -12:00am: Exam |
Prerequisites
- Programming in C/C++
- Built your own computer from components (graphics card, processor, motherboard, ...)
Knowledge You'll Gain
- Electrical engineering basics
- Interconnection of hardware and their inner workings
- (secure) design principles
- Creativity
Terms
- Groups of two students work together for the duration of the semester
- As a courtesy, please remember that dropping out of this course means that you leave your group partner behind. So if unsure, leave room for students who are enthusiastic about attending this course
- Creative solutions are welcome
Grading
- 47% exercise (answers to questions in the exercise sheet and practical hands-on programming of hardware)
- 47% final exam (end of semester, August 16th 2018)
- 6% pure luck (bias in favour of you in case of doubt)