Sprachbasierte Sicherheit

What it is about

You will learn how programs run at machine level, what language-based attacks (e.g., code-injection, code-reuse, non-control-data attacks) exist and how to technically defend against them. In the end you will be able to recognize current attack mechanisms, explain their principles and implement and evaluate defensive measures.

What you will be able to do

• Understanding the runtime structure of programs at the machine level
• Identifying and analyzing code-injection attacks and countermeasures
• Understanding code-reuse attacks (e.g., ROP) and defense concepts
• Detecting data attacks (non-control-data) and protection approaches
• Practical implementation and evaluation of simple security mechanisms
• Placement of current research results (e.g., CFI theory, software diversity trends)

What the module consists of

• VorlesungDelivery of the theoretical foundations and current research results
• ÜbungAccompanying implementation tasks for deepening and applying the techniques

Teaching method

• Vorlesung mit Folienpräsentation und TafelanschriebFor systematic conveyance of the concepts and illustrating arguments
• Begleitende ImplementierungsübungenFor practical deepening and application of the presented security mechanisms