Embedded Security Stefan N├╝rnberger

News

04.10.2018

Status Update: Grades still CANNOT be entered in LSF

Unfortunately the situation that grades cannot be entered in LSF is still true as of today. They wanted to fix the issue more than 3 weeks ago but apparently I cannot not enter your grades in LSF. I'm sorry about that but it's not my fault. The HIZ is working on... Read more

Unfortunately the situation that grades cannot be entered in LSF is still true as of today. They wanted to fix the issue more than 3 weeks ago but apparently I cannot not enter your grades in LSF. I'm sorry about that but it's not my fault. The HIZ is working on that matter and I try to urge them again. 

I'll keep you posted about the status.

 

20.08.2018

Exam Grades...

*Drumroll* ..... 

 

...are in your CMS account!

The exam inspection will take place on September 04, 1pm - 3pm at CISPA seminar room 0.07. 

16.08.2018

Exam Location

Just in case it was unclear: the exam will be written in the CISPA lecture hall, hence in the same room the lecture took place.

05.08.2018

Solutions for Exercise Sheet 5 and 6

A sample solution for sheets 5 and 6 has been uploaded in the Materials section.

If you want to take part in the exam, do not forget to register in the LSF in time.

15.07.2018

Tomorrow: Q&A / Please Return Hardware

Tomorrow will be Q&A session in the lecture slot (10am). This is a good chance to ask questions.

Please also remember to bring all the hardware that you still have as this is the last possibility to return it.

11.07.2018

Office hours tomorrow, July 12th and hardware return reminder

As we will most likely not finish correction until the office hour tomorrow, we decided to move the exercise discussion to Thursday next week (July 19th). There will be a regular office hour tomorrow to ask questions.

 

Also, a short reminder that the hardware... Read more

As we will most likely not finish correction until the office hour tomorrow, we decided to move the exercise discussion to Thursday next week (July 19th). There will be a regular office hour tomorrow to ask questions.

 

Also, a short reminder that the hardware needs to be returned at the latest on Monday, July 16th. If no one in your team is able to make it, please hand it back during the office hours tomorrow. If both dates do not fit, write a Mail to Simeon with an appointment suggestion (before July 16th).

10.07.2018

Yet another small update

There has been yet another small update concerning the current exercise sheet. A small part of exercise 1b) has been reformulated.

10.07.2018

Another small fix

Another problem was brought to our attention concerning the current exercise. It is fixed now, if you were already working on it, you might want to redownload the exercise sheet.

10.07.2018

Small fix for current exercise

It has been brought to our attention that the code skeleton we provided is not entirely functional the way it is described to be. This is now fixed. If you are working on the bonus exercise, you may want to redownload.

09.07.2018

The new exercise is now online in the CMS. In case you downloaded the premature version earlier, please redownload.

Also, please return your hardware next week on Monday. If no one of your team is able to make it, please return your hardware during the office... Read more

The new exercise is now online in the CMS. In case you downloaded the premature version earlier, please redownload.

Also, please return your hardware next week on Monday. If no one of your team is able to make it, please return your hardware during the office hours on Thursday between 4 and 6 pm. If neither appointment fits for you, please write an email to Simeon with another time slot that fits your schedule (the time slot needs to be before Monday, July 16th).

Please note that we will not accept incomplete hardware sets ("We'll bring the rest later.") or late returns.

The slides for last week will be uploaded later today. Note that as announced in the lecture last week and this week, slides for today's lecture will not be published. Consequently, they are not relevant for the exam and the exercises.

05.07.2018

Office hour room change and small reminder

Due to the unavailability of our usual room for the office hour, it takes place in room 2.22 today.

 

Also small reminder that you may not use command line tools to measure the integrity of your files in the current task.

You may also not use your C code as... Read more

Due to the unavailability of our usual room for the office hour, it takes place in room 2.22 today.

 

Also small reminder that you may not use command line tools to measure the integrity of your files in the current task.

You may also not use your C code as a wrapper to the already existing programs (like for example the preexisting flushcontext program in the TSS).

This approach will not yield any points. You may of course look at the source code of such programs and implement your task similarly.

Have fun!

02.07.2018

Grading update

We decided to change the grading for the last exercise of exercise 4.

All solutions proposing DH-key exchange are now also accepted.

Points have been updated.

29.06.2018

Extra Office hour

We were told that some of you asked for help and missed the office hour in the lecture hall. We therefore offer an extra small office hour tomorrow, friday the 29.7.18, between 4:15pm and 5:00pm in E9.1 2.21.

As a reminder, the office hours on thursdays after a... Read more

We were told that some of you asked for help and missed the office hour in the lecture hall. We therefore offer an extra small office hour tomorrow, friday the 29.7.18, between 4:15pm and 5:00pm in E9.1 2.21.

As a reminder, the office hours on thursdays after a submission was closed are held in the lecture hall and recap the solution of the last exercise sheet.

28.06.2018

Small update

We issued a small update on the exercise sheet that rewrites passages that were not clear.

Also, in case you missed it, points for the most recent exercise have been uploaded.

19.06.2018

Hardware exchange

We will hand out new hardware in the lecture on Monday for the new exercise, so please make sure that at least one person will be claiming the new hardware.

In return, we will collect the ESP32 controller that you got for the exercise this week, so please bring... Read more

We will hand out new hardware in the lecture on Monday for the new exercise, so please make sure that at least one person will be claiming the new hardware.

In return, we will collect the ESP32 controller that you got for the exercise this week, so please bring it to the lecture on Monday.

18.06.2018

TPM Lectures online

The last two TPM lectures (by Sven Bugiel) are now online as PDF slides. 

Additionally, I attached the handwritten notes giving a motivation and the example commands from today.

05.06.2018

Exercise 4

The fourth exercise sheet is now online. You must submit your solution until June 25., 9:59am.

Even though you have three weeks to complete the tasks, the first task is tricky. As always you can ask questions via E-Mail, the forum or in the office hours. Note... Read more

The fourth exercise sheet is now online. You must submit your solution until June 25., 9:59am.

Even though you have three weeks to complete the tasks, the first task is tricky. As always you can ask questions via E-Mail, the forum or in the office hours. Note that this office hour on thursday we will discuss the last exercise sheet in the Lecture hall, but we are also happy to answer questions concerning the actual exercise sheet.

If you want to try out your ESP's WLAN configuration, you can do so in the students working room in the second floor. We installed a router for you.

04.06.2018

New hardware

We handed out new hardware today in the lecture. If no member of your team is able to make it, you will be able to fetch it in the office hour of this week.

We expect you to own a functional micro USB cable for the new hardware. If neither member of your team... Read more

We handed out new hardware today in the lecture. If no member of your team is able to make it, you will be able to fetch it in the office hour of this week.

We expect you to own a functional micro USB cable for the new hardware. If neither member of your team does have such a cable, please write a message to the tutors. We do not have many of these, so please only take a cable from us if there is no other way for you to get one.

28.05.2018

Fix concerning current sheet exercise 2

It has brought to our attention that there was a small mistake in the provided code for exercise 2. This is now fixed on the hardware and the updated sheet is online. You may want to check if your attack still works, but if you implemented a correct bufferoverflow... Read more

It has brought to our attention that there was a small mistake in the provided code for exercise 2. This is now fixed on the hardware and the updated sheet is online. You may want to check if your attack still works, but if you implemented a correct bufferoverflow as stated in the exercise, nonthing should change.

22.05.2018

Re: Building access

Remember to send us a mail with your UDS card number as described in the previous post if you want access to the CISPA building.

Deadline will be thursday morning at 10 am.

22.05.2018

Lecture Slides & Recording available

The lecture slides and the recording (video with my voiceover) is now available. 

Have a look: https://cms.cispa.saarland/emsec/

21.05.2018

Exercise 3

The third exercise sheet is now online. The lecture will be uploaded later today.

Information for exerise 1: You need to be in the same /24 subnet ip range as the arduino, hence any 192.168.1.x ip should do.

Also, make sure that the ID of the CAN frame you... Read more

The third exercise sheet is now online. The lecture will be uploaded later today.

Information for exerise 1: You need to be in the same /24 subnet ip range as the arduino, hence any 192.168.1.x ip should do.

Also, make sure that the ID of the CAN frame you send to the arduino is exactly 3 characters long.

There was a small but decisive fix in the exercise. You may want to redownload the exercise.

16.05.2018

Exercise 2 points are online, Office hour changes and building access

The points for exercise 2 are online now.

The overall schedule of the course changes a little bit: instead of office hour every week, we will offer a tutorial in the week after you submitted an exercise in the office hour slot. In this tutorial, we will discuss... Read more

The points for exercise 2 are online now.

The overall schedule of the course changes a little bit: instead of office hour every week, we will offer a tutorial in the week after you submitted an exercise in the office hour slot. In this tutorial, we will discuss the solution of the most recent exercise sheet. This tutorial takes place in the lecture hall. This new schedule starts immediately, hence there will be a tutorial tomorrow at 4 pm in the lecture hall.

As you might need building access for future exercises again, please send your card id (the number in the top left of your UDS card) in a mail to one of the tutors if you do not have building access already. Make sure that it is a 17-digit number, as the older cards (less digits) are not supported for granting building access. If you have such an old card, you can change it to the newer model at campus center. It should be free of charge if you mention that you need access to the CISPA building.
 

11.05.2018

Exercise 2 and lecture next week

Exercise 2:

We acknowledge that the second task from the current exercise is out of scope for this course (too hard). Hence we change the evaluation of this exercise: you will get up to full points for this exercise if you can present an approach that will lead... Read more

Exercise 2:

We acknowledge that the second task from the current exercise is out of scope for this course (too hard). Hence we change the evaluation of this exercise: you will get up to full points for this exercise if you can present an approach that will lead you to the result and that shows that you understood the problem. You DO NOT need the secret to receive full points for this exercise. However if you managed to extract the secret and can present how you did it, you will be awarded 5 bonus points.

Lecture next week:
There will be no lecture next week and thus no new exercise sheet. Please note that the current deadline IS NOT extended.

Next week on monday (a holiday), there will be a video upload with a new lecture and a new exercise sheet. You have the full two weeks to work on this exercise sheet.

10.05.2018

Replacement office hour

As there seem to be a lot of issues concerning the current exercise sheet and today is a holiday, there will be a replacement office hour tomorrow at 4 pm. It will take place in the usual room, room 2.21 in the CISPA building.

01.05.2018

Exercise 2

The second exercise sheet is now online. Read the instructions carefully and hand in your solution until May 14, 9:59 am (before the lecture).

20.04.2018

Office hours

From now on, there will be office hours on thursdays from 4 pm to 6 pm in room 2.21 in E 9 1.

Feel free to come if you have problems with your project or questions concerning the lecture.
 

19.04.2018

Change of Lecture Hall for Next Monday (April 23)

Next Monday (April 23), we'll be in the CISPA Presentation Room (Room 0.01 ground floor) instead of the big lecture hall.
The presentation room is just opposite the lecture hall (on the right hand side when you enter foyer)

 

See you then!

16.04.2018

Lecture Slides and Exercise 01 (Microcontrollers & Basics) is online

The lecture slides from today's lecture are online: https://cms.cispa.saarland/emsec/dl/3/Lecture-01-Microcontrollers.pdf

For the exercise, have a look at the Exercise page.

REMINDER: Pick-up of hardware tomorrow, April 17, 16:00 in the CISPA lecture hall

05.04.2018

Embedded Security @ Semester Kickoff

Embedded Security will be presented at the Semester-Kick-Off-meeting (Monday, April 9th, 2018)  in "Günter-Hotz-Lecture-Hall", building E2 2, 4.30 p.m.

Show all
 

Embedded Security

 

Embedded Security ("Emsec") takes place weekly, every Monday 10:00 to 11:30 am in the CISPA Lecture Hall

It is accompanied by bi-weekly practical exercises that should be done in groups of two students.

Time Table Overview

Time Table
Date Lecture Exercise
April 16 Introduction, Organisational
Topic: Microcontrollers

CISPA Lecture Hall
Exercise #1
Microcontrollers
Until April 30 at 9:59
April 23

Topics:

Side Channels,
Covert Channels,
TEMPEST,
Power Analysis

CISPA Presentation Room (0.01)

 
April 30   Exercise #2
{Side | Covert} Channels
Until May 14 at 9:59
May 07    
May 14    
May 21

Topic: Automotive Security

Video Recording
(Due to holiday)

 Exercise #3
(Automotive Security)

Until June 04 at 9:59

May 28 Topic: Wireless Security
CISPA Lecture Hall
 
June 04

Topic: Secure Software Architectures
(Video Recording)
CISPA Lecture Hall

Exercise #4
(Wireless Security)

Until June 25 at 9:59

June 11 Guest Lecture TPM 1/2
TPM Introduction (with Motivation)
(Sven Bugiel)
CISPA Lecture Hall
 
June 18 Guest Lecture TPM 2/2
TPM Storage (with example)
(Sven Bugiel)
CISPA Lecture Hall
 
June 25 Guest Tutorial TPM
(Dhiman Chakraborty)
CISPA Lecture Hall

Exercise #5
(TPM)

Until July 09 at 9:59

July 02 Security by Design
(Video Recording)
CISPA Lecture Hall
 
July 09 Case Study: Reverse Engineering of a Car
(No Slides)
CISPA Lecture Hall
Exercise #6 -> Until July 16 at 9:59
July 16 Live Q&A
CISPA Lecture Hall

Hand in Exercise #6

 

Aug 16 EXAM
(CISPA Lecture Hall)
10:00am -12:00am: Exam

 

Prerequisites

  • Programming in C/C++
  • Built your own computer from components (graphics card, processor, motherboard, ...)

Knowledge You'll Gain

  • Electrical engineering basics
  • Interconnection of hardware and their inner workings
  • (secure) design principles
  • Creativity

Terms 

  • Groups of two students work together for the duration of the semester
  • As a courtesy, please remember that dropping out of this course means that you leave your group partner behind. So if unsure, leave room for students who are enthusiastic about attending this course
  • Creative solutions are welcome

 

Grading

  • 47% exercise (answers to questions in the exercise sheet and practical hands-on programming of hardware)
  • 47% final exam (end of semester, August 16th 2018)
  • 6% pure luck (bias in favour of you in case of doubt)


Privacy Policy | Legal Notice
If you encounter technical problems, please contact the administrators