News

Status Update: Grades still CANNOT be entered in LSF

Written on 04.10.18 by Stefan Nürnberger

Unfortunately the situation that grades cannot be entered in LSF is still true as of today. They wanted to fix the issue more than 3 weeks ago but apparently I cannot not enter your grades in LSF. I'm sorry about that but it's not my fault. The HIZ is working on that matter and I try to urge them… Read more

Unfortunately the situation that grades cannot be entered in LSF is still true as of today. They wanted to fix the issue more than 3 weeks ago but apparently I cannot not enter your grades in LSF. I'm sorry about that but it's not my fault. The HIZ is working on that matter and I try to urge them again. 

I'll keep you posted about the status.

 

Exam Grades...

Written on 20.08.18 by Stefan Nürnberger

*Drumroll* ..... 

 

...are in your CMS account!

The exam inspection will take place on September 04, 1pm - 3pm at CISPA seminar room 0.07. 

Exam Location

Written on 16.08.18 by Simeon Hoffmann

Just in case it was unclear: the exam will be written in the CISPA lecture hall, hence in the same room the lecture took place.

Solutions for Exercise Sheet 5 and 6

Written on 05.08.18 by Finn Hermeling

A sample solution for sheets 5 and 6 has been uploaded in the Materials section.

If you want to take part in the exam, do not forget to register in the LSF in time.

Tomorrow: Q&A / Please Return Hardware

Written on 15.07.18 by Stefan Nürnberger

Tomorrow will be Q&A session in the lecture slot (10am). This is a good chance to ask questions.

Please also remember to bring all the hardware that you still have as this is the last possibility to return it.

Office hours tomorrow, July 12th and hardware return reminder

Written on 11.07.18 by Simeon Hoffmann

As we will most likely not finish correction until the office hour tomorrow, we decided to move the exercise discussion to Thursday next week (July 19th). There will be a regular office hour tomorrow to ask questions.

 

Also, a short reminder that the hardware needs to be returned at the latest… Read more

As we will most likely not finish correction until the office hour tomorrow, we decided to move the exercise discussion to Thursday next week (July 19th). There will be a regular office hour tomorrow to ask questions.

 

Also, a short reminder that the hardware needs to be returned at the latest on Monday, July 16th. If no one in your team is able to make it, please hand it back during the office hours tomorrow. If both dates do not fit, write a Mail to Simeon with an appointment suggestion (before July 16th).

Yet another small update

Written on 10.07.18 by Simeon Hoffmann

There has been yet another small update concerning the current exercise sheet. A small part of exercise 1b) has been reformulated.

Another small fix

Written on 10.07.18 by Simeon Hoffmann

Another problem was brought to our attention concerning the current exercise. It is fixed now, if you were already working on it, you might want to redownload the exercise sheet.

Small fix for current exercise

Written on 10.07.18 by Simeon Hoffmann

It has been brought to our attention that the code skeleton we provided is not entirely functional the way it is described to be. This is now fixed. If you are working on the bonus exercise, you may want to redownload.

Written on 09.07.18 by Simeon Hoffmann

The new exercise is now online in the CMS. In case you downloaded the premature version earlier, please redownload.

Also, please return your hardware next week on Monday. If no one of your team is able to make it, please return your hardware during the office hours on Thursday between 4 and 6 pm.… Read more

The new exercise is now online in the CMS. In case you downloaded the premature version earlier, please redownload.

Also, please return your hardware next week on Monday. If no one of your team is able to make it, please return your hardware during the office hours on Thursday between 4 and 6 pm. If neither appointment fits for you, please write an email to Simeon with another time slot that fits your schedule (the time slot needs to be before Monday, July 16th).

Please note that we will not accept incomplete hardware sets ("We'll bring the rest later.") or late returns.

The slides for last week will be uploaded later today. Note that as announced in the lecture last week and this week, slides for today's lecture will not be published. Consequently, they are not relevant for the exam and the exercises.

Office hour room change and small reminder

Written on 05.07.18 by Simeon Hoffmann

Due to the unavailability of our usual room for the office hour, it takes place in room 2.22 today.

 

Also small reminder that you may not use command line tools to measure the integrity of your files in the current task.

You may also not use your C code as a wrapper to the already existing… Read more

Due to the unavailability of our usual room for the office hour, it takes place in room 2.22 today.

 

Also small reminder that you may not use command line tools to measure the integrity of your files in the current task.

You may also not use your C code as a wrapper to the already existing programs (like for example the preexisting flushcontext program in the TSS).

This approach will not yield any points. You may of course look at the source code of such programs and implement your task similarly.

Have fun!

Grading update

Written on 02.07.18 by Simeon Hoffmann

We decided to change the grading for the last exercise of exercise 4.

All solutions proposing DH-key exchange are now also accepted.

Points have been updated.

Extra Office hour

Written on 29.06.18 (last change on 29.06.18) by Finn Hermeling

We were told that some of you asked for help and missed the office hour in the lecture hall. We therefore offer an extra small office hour tomorrow, friday the 29.7.18, between 4:15pm and 5:00pm in E9.1 2.21.

As a reminder, the office hours on thursdays after a submission was closed are held in the… Read more

We were told that some of you asked for help and missed the office hour in the lecture hall. We therefore offer an extra small office hour tomorrow, friday the 29.7.18, between 4:15pm and 5:00pm in E9.1 2.21.

As a reminder, the office hours on thursdays after a submission was closed are held in the lecture hall and recap the solution of the last exercise sheet.

Small update

Written on 28.06.18 by Simeon Hoffmann

We issued a small update on the exercise sheet that rewrites passages that were not clear.

Also, in case you missed it, points for the most recent exercise have been uploaded.

Hardware exchange

Written on 19.06.18 by Simeon Hoffmann

We will hand out new hardware in the lecture on Monday for the new exercise, so please make sure that at least one person will be claiming the new hardware.

In return, we will collect the ESP32 controller that you got for the exercise this week, so please bring it to the lecture on Monday.

TPM Lectures online

Written on 18.06.18 by Stefan Nürnberger

The last two TPM lectures (by Sven Bugiel) are now online as PDF slides. 

Additionally, I attached the handwritten notes giving a motivation and the example commands from today.

Exercise 4

Written on 05.06.18 by Finn Hermeling

The fourth exercise sheet is now online. You must submit your solution until June 25., 9:59am.

Even though you have three weeks to complete the tasks, the first task is tricky. As always you can ask questions via E-Mail, the forum or in the office hours. Note that this office hour on thursday we… Read more

The fourth exercise sheet is now online. You must submit your solution until June 25., 9:59am.

Even though you have three weeks to complete the tasks, the first task is tricky. As always you can ask questions via E-Mail, the forum or in the office hours. Note that this office hour on thursday we will discuss the last exercise sheet in the Lecture hall, but we are also happy to answer questions concerning the actual exercise sheet.

If you want to try out your ESP's WLAN configuration, you can do so in the students working room in the second floor. We installed a router for you.

New hardware

Written on 04.06.18 by Simeon Hoffmann

We handed out new hardware today in the lecture. If no member of your team is able to make it, you will be able to fetch it in the office hour of this week.

We expect you to own a functional micro USB cable for the new hardware. If neither member of your team does have such a cable, please write a… Read more

We handed out new hardware today in the lecture. If no member of your team is able to make it, you will be able to fetch it in the office hour of this week.

We expect you to own a functional micro USB cable for the new hardware. If neither member of your team does have such a cable, please write a message to the tutors. We do not have many of these, so please only take a cable from us if there is no other way for you to get one.

Fix concerning current sheet exercise 2

Written on 28.05.18 by Simeon Hoffmann

It has brought to our attention that there was a small mistake in the provided code for exercise 2. This is now fixed on the hardware and the updated sheet is online. You may want to check if your attack still works, but if you implemented a correct bufferoverflow as stated in the exercise, nonthing should change.

Re: Building access

Written on 22.05.18 by Simeon Hoffmann

Remember to send us a mail with your UDS card number as described in the previous post if you want access to the CISPA building.

Deadline will be thursday morning at 10 am.

Lecture Slides & Recording available

Written on 22.05.18 by Stefan Nürnberger

The lecture slides and the recording (video with my voiceover) is now available. 

Have a look: https://cms.cispa.saarland/emsec/

Exercise 3

Written on 21.05.18 (last change on 21.05.18) by Simeon Hoffmann

The third exercise sheet is now online. The lecture will be uploaded later today.

Information for exerise 1: You need to be in the same /24 subnet ip range as the arduino, hence any 192.168.1.x ip should do.

Also, make sure that the ID of the CAN frame you send to the arduino is exactly 3… Read more

The third exercise sheet is now online. The lecture will be uploaded later today.

Information for exerise 1: You need to be in the same /24 subnet ip range as the arduino, hence any 192.168.1.x ip should do.

Also, make sure that the ID of the CAN frame you send to the arduino is exactly 3 characters long.

There was a small but decisive fix in the exercise. You may want to redownload the exercise.

Exercise 2 points are online, Office hour changes and building access

Written on 16.05.18 by Simeon Hoffmann

The points for exercise 2 are online now.

The overall schedule of the course changes a little bit: instead of office hour every week, we will offer a tutorial in the week after you submitted an exercise in the office hour slot. In this tutorial, we will discuss the solution of the most recent… Read more

The points for exercise 2 are online now.

The overall schedule of the course changes a little bit: instead of office hour every week, we will offer a tutorial in the week after you submitted an exercise in the office hour slot. In this tutorial, we will discuss the solution of the most recent exercise sheet. This tutorial takes place in the lecture hall. This new schedule starts immediately, hence there will be a tutorial tomorrow at 4 pm in the lecture hall.

As you might need building access for future exercises again, please send your card id (the number in the top left of your UDS card) in a mail to one of the tutors if you do not have building access already. Make sure that it is a 17-digit number, as the older cards (less digits) are not supported for granting building access. If you have such an old card, you can change it to the newer model at campus center. It should be free of charge if you mention that you need access to the CISPA building.
 

Exercise 2 and lecture next week

Written on 11.05.18 by Simeon Hoffmann

Exercise 2:

We acknowledge that the second task from the current exercise is out of scope for this course (too hard). Hence we change the evaluation of this exercise: you will get up to full points for this exercise if you can present an approach that will lead you to the result and that shows that… Read more

Exercise 2:

We acknowledge that the second task from the current exercise is out of scope for this course (too hard). Hence we change the evaluation of this exercise: you will get up to full points for this exercise if you can present an approach that will lead you to the result and that shows that you understood the problem. You DO NOT need the secret to receive full points for this exercise. However if you managed to extract the secret and can present how you did it, you will be awarded 5 bonus points.

Lecture next week:
There will be no lecture next week and thus no new exercise sheet. Please note that the current deadline IS NOT extended.

Next week on monday (a holiday), there will be a video upload with a new lecture and a new exercise sheet. You have the full two weeks to work on this exercise sheet.

Replacement office hour

Written on 10.05.18 (last change on 11.05.18) by Simeon Hoffmann

As there seem to be a lot of issues concerning the current exercise sheet and today is a holiday, there will be a replacement office hour tomorrow at 4 pm. It will take place in the usual room, room 2.21 in the CISPA building.

Exercise 2

Written on 01.05.18 by Simeon Hoffmann

The second exercise sheet is now online. Read the instructions carefully and hand in your solution until May 14, 9:59 am (before the lecture).

Office hours

Written on 20.04.18 by Simeon Hoffmann

From now on, there will be office hours on thursdays from 4 pm to 6 pm in room 2.21 in E 9 1.

Feel free to come if you have problems with your project or questions concerning the lecture.
 

Change of Lecture Hall for Next Monday (April 23)

Written on 19.04.18 by Stefan Nürnberger

Next Monday (April 23), we'll be in the CISPA Presentation Room (Room 0.01 ground floor) instead of the big lecture hall.
The presentation room is just opposite the lecture hall (on the right hand side when you enter foyer)

 

See you then!

Lecture Slides and Exercise 01 (Microcontrollers & Basics) is online

Written on 16.04.18 by Stefan Nürnberger

The lecture slides from today's lecture are online: https://cms.cispa.saarland/emsec/dl/3/Lecture-01-Microcontrollers.pdf

For the exercise, have a look at the Exercise page.

REMINDER: Pick-up of hardware tomorrow, April 17, 16:00 in the CISPA lecture hall

Embedded Security @ Semester Kickoff

Written on 05.04.18 by Stefan Nürnberger

Embedded Security will be presented at the Semester-Kick-Off-meeting (Monday, April 9th, 2018)  in "Günter-Hotz-Lecture-Hall", building E2 2, 4.30 p.m.

Show all

Embedded Security

 

Embedded Security ("Emsec") takes place weekly, every Monday 10:00 to 11:30 am in the CISPA Lecture Hall

It is accompanied by bi-weekly practical exercises that should be done in groups of two students.

Time Table Overview

Time Table
Date Lecture Exercise
April 16 Introduction, Organisational
Topic: Microcontrollers

CISPA Lecture Hall
Exercise #1
Microcontrollers
Until April 30 at 9:59
April 23

Topics:

Side Channels,
Covert Channels,
TEMPEST,
Power Analysis

CISPA Presentation Room (0.01)

 
April 30   Exercise #2
{Side | Covert} Channels
Until May 14 at 9:59
May 07    
May 14    
May 21

Topic: Automotive Security

Video Recording
(Due to holiday)

 Exercise #3
(Automotive Security)

Until June 04 at 9:59

May 28 Topic: Wireless Security
CISPA Lecture Hall
 
June 04

Topic: Secure Software Architectures
(Video Recording)
CISPA Lecture Hall

Exercise #4
(Wireless Security)

Until June 25 at 9:59

June 11 Guest Lecture TPM 1/2
TPM Introduction (with Motivation)
(Sven Bugiel)
CISPA Lecture Hall
 
June 18 Guest Lecture TPM 2/2
TPM Storage (with example)
(Sven Bugiel)
CISPA Lecture Hall
 
June 25 Guest Tutorial TPM
(Dhiman Chakraborty)
CISPA Lecture Hall

Exercise #5
(TPM)

Until July 09 at 9:59

July 02 Security by Design
(Video Recording)
CISPA Lecture Hall
 
July 09 Case Study: Reverse Engineering of a Car
(No Slides)
CISPA Lecture Hall
Exercise #6 -> Until July 16 at 9:59
July 16 Live Q&A
CISPA Lecture Hall

Hand in Exercise #6

 

Aug 16 EXAM
(CISPA Lecture Hall)
10:00am -12:00am: Exam

 

Prerequisites

  • Programming in C/C++
  • Built your own computer from components (graphics card, processor, motherboard, ...)

Knowledge You'll Gain

  • Electrical engineering basics
  • Interconnection of hardware and their inner workings
  • (secure) design principles
  • Creativity

Terms 

  • Groups of two students work together for the duration of the semester
  • As a courtesy, please remember that dropping out of this course means that you leave your group partner behind. So if unsure, leave room for students who are enthusiastic about attending this course
  • Creative solutions are welcome

 

Grading

  • 47% exercise (answers to questions in the exercise sheet and practical hands-on programming of hardware)
  • 47% final exam (end of semester, August 16th 2018)
  • 6% pure luck (bias in favour of you in case of doubt)
Privacy Policy | Legal Notice
If you encounter technical problems, please contact the administrators.