Institute of Operating Systems and Computer Networks
- News
- About us
- Connected and Mobile Systems
  - Team
  - Courses
  - Theses
  - Projects
  - Publications
  - Software
  - Datasets
- Reliable System Software
  - Overview
  - Team
  - Teaching
  - Theses & Jobs
  - Research
  - Publications
- Algorithms
  - Team
  - Courses
  - Theses
  - Projects
  - Publications
- Microprocessor Lab
- Education
- Services
- Spin-Offs
  - Docoloc
  - bliq (formerly AIPARK)
  - Confidential Technologies
- Research Cooperations
  - IST.hub

Operating System Security

Semester	Winter 2019/2020 Winter 2021/2022 Winter 2020/2021
Module #	INF-IBR-07
Programme	Computer Science Master
IBR Group	DS (Prof. Kapitza)
Type	Lecture & Exercise
Lecturer	Prof. Dr. Rüdiger Kapitza Ehemaliger Abteilungsleiter rrkapitz[[at]]ibr.cs.tu-bs.de
Assistant	Dr. Nico Weichbrodt Ehemaliger Wissenschaftlicher Mitarbeiter weichbrodt[[at]]ibr.cs.tu-bs.de
Hiwi	Mohammad Mahhouk Ehemaliger Wissenschaftlicher Mitarbeiter
Credits	5
Hours	2+2
Time & Place	Lecture (weekly): Mondays, 13:15 - 14:45, Room 161 Exercise lecture (Tafelübung, irregular): Wednesdays, 15:00 - 16:30, Room 161 Rechnerübungen (weekly): - Tuesdays, 13:15 - 14:45 (room IZ-G40) - Fridays, 15:00 - 16:30 (room IZ-G40) Exceptions: - Exercise lecture is irregular, please see the calender below for the dates
Start	The lecture starts on Monday, 2019-11-04. The exercise lecture starts on Wednesday, 2019-10-30. The lab (Rechnerübungen) starts on Tuesday, 2019-11-05.
Attendees	Studenten der Informatik
Prerequisites	none
Certificates	Passed oral exam as well as sucessfull participation during the exercises.
Registration	Die Anmeldefrist ist abgelaufen. Please login to get more information here as a mitarb member.
Content	Material zur Vorlesung The material is only available to registered attendees. In order to register, you need either an IBR POSIX account or a self-activated IBR-y-account. Afterwards you can login to this site. Chapter Slides Exercises 1. Introduction and Overview 2. Threats and Security Principles 3. Multics 4. LSM 4. Integrity 6. SELinux 7. SGX 8. Security Kernels 9. VMM 10. AMDs Virtualization Memory Encryption Technology Material zur Übung The material is only available to registered attendees. In order to register, you need either an IBR POSIX account or a self-activated IBR-y-account. Afterwards you can login to this site. Chapter Slides Exercises Paper Analysis 01 1. Organisation and Intro to Namespaces Paper Analysis 02 Paper Analysis 03 2. Securing Containers Paper Analysis 04 Paper Analysis 05 3. SGX Paper Analysis 06 Lecture Operating system security mechanisms: protection and access control Virtualization and container mechanisms Micro kernel architecture Trusted computing Secure co-processors (i.e. trusted platform module (TPM)) Modal execution (i.e. ARM TrustZone) Trusted execution on commodity platforms (i.e. SGX and SEV) Based on the Book Operating System Security by Trent Jaeger. T. Jaeger: Operating System Security, G - Reference, Information and Interdisciplinary Subjects Series, Morgan & Claypool Publishers, 2008 (jaeger2008operating, BibTeX) Übung Bei Fragen zu den Übungen kontaktiert bitte Nico oder Rüdiger.
Schedule	[ Subscribe Calendar \| Download Calendar ] 30.10.2019, 15:00 Exercise lecture (IZ Raum 161) 04.11.2019, 13:15 Lecture (IZ Raum 161) 11.11.2019, 13:15 Lecture (IZ Raum 161) 18.11.2019, 13:15 Lecture (IZ Raum 161) 25.11.2019, 13:15 Lecture (IZ Raum 161) 26.11.2019, 13:15 Presentations first exercise (IZ Raum G40) 27.11.2019, 15:00 Exercise lecture (IZ Raum 161) 29.11.2019, 15:00 Presentations first exercise (IZ Raum G40) 02.12.2019, 13:15 Lecture (IZ Raum 161) 09.12.2019, 13:15 Lecture (IZ Raum 161) 16.12.2019, 13:15 No Lecture, cancelled (IZ Raum 161) 17.12.2019, 13:15 Presentations second exercise (IZ Raum G40) 20.12.2019, 15:00 Presentations second exercise (IZ Raum G40) 06.01.2020, 13:15 Lecture (IZ Raum 161) 13.01.2020, 13:15 Lecture (IZ Raum 161) 15.01.2020, 15:00 Exercise lecture (IZ Raum 161) 20.01.2020, 13:15 Lecture (IZ Raum 161) 27.01.2020, 13:15 Lecture (IZ Raum 161) 03.02.2020, 13:15 Lecture (IZ Raum 161) 04.02.2020, 13:15 Presentations third exercise (IZ Raum G40) 07.02.2020, 15:00 Presentations third exercise (IZ Raum G40)
References	Auf Dokumente der ACM Digital Library (http://dl.acm.org/) kann nur aus dem Netz der TU Braunschweig zugegriffen werden. Intel SGX Programming Reference Intel SGX SDK Developer Reference AMD SME Whitepaper Sergei Arnautov, Bohdan Trach, Franz Gregor, Thomas Knauth, André Martin, Christian Priebe, Joshua Lind, Divya Muthukumaran, Daniel O'Keeffe, Mark L Stillwell, David Goltzsche, Dave Eyers, Rüdiger Kapitza, Peter Pietzuch and Christof Fetzer: SCONE: Secure Linux Containers with Intel SGX, in 12th USENIX Symposium on Operating Systems Design and Implementation (OSDI), Savannah, GA, USA, USENIX, January 2016 (arnautov2016scone, BibTeX, Slides) Nico Weichbrodt, Anil Kurmus, Peter Pietzuch and Rüdiger Kapitza: AsyncShock: Exploiting Synchronisation Bugs in Intel SGX Enclaves, in Proceedings of the 21st European Symposium on Research in Computer Security (ESORICS 2016), 2016 (weichbr16esorics, BibTeX) David Goltzsche, Signe Rüsch, Manuel Nieke, Sébastien Vaucher, Nico Weichbrodt, Valerio Schiavoni, Pierre-Louis Aublin, Paolo Costa, Christof Fetzer, Pascal Felber, Peter Pietzuch and Rüdiger Kapitza: EndBox: Scalable Middlebox Functions Using Client-Side Trusted Execution, in Proceedings of the 48th International Conference on Dependable Systems and Networks, DSN'18, 2018 (goltzsche2018endbox, DOI, BibTeX, Slides)

Operating System Security

Material zur Vorlesung

Material zur Übung

Lecture

Übung

For All Visitors

For Students

Internal Tools

Contact