|
Prof. Dr. Alexander Pretschner
Welcome to the security group at TU Kaiserslautern!
We consider security from a systems engineering perspective: concepts, models, architectures, subsystems, tools, and processes for more secure software systems. The group was founded on October 1st, 2008.
- Join our weekly security-hands-on seminar @ IESE on Mondays at 17.15
- Register for a security-related topic in the Software Engineering Seminar for MS students (privacy in social networks, Sibyl attacks, virtualization, anonymity, DDoS, or privacy engineering) ...
- ... or for a security-related topic in the Software Engineering Seminar for BS students (electronic voting, security in mobile platforms, security development process, trusted computing and identity management, public key infrastructures ).
- Attend our Security Engineering Lab (please register before October 18th)
- Attend our class on Advanced Topics of Software Testing (48-462, Thursdays 13.45-15.15)
- Apply for a doctoral or post-doctoral position at the intersection of systems engineering and information security.
One of the focal points of our research is usage control. Usage control generalizes access control to the future: what happens to data once it's been given away? Relevant requirements include, "delete data after 30 days," "don't delete data within 5 years," "notify me whenever data is accessed," "no data must leave the system un-anonymized." This is relevant in the areas of data protection, compliance with regulatory frameworks, business processes that are implemented in a distributed way (e.g., via SOAs), the general management of intellectual property and secrets and, yes, DRM. The fun part is that requirements of this kind can be enforced at all levels of the software stack: the CPU, in a virtualized processor, in the OS, the runtime system, infrastructure applications such as X11, application frameworks, services, and business processes. Even better, the topic spans theoretical, conceptual, methodological, and technical matters. For a gentle intro, check any of these German and English bird's eye articles.I want to work with dedicated and enthusiastic researchers with an interest in both theory and practice who, ideally, have some knowledge of systems and software engineering, information security, implementation skills and, yes, no fear of maths. If you think you could use some supervision during your doctoral studies, and if you like working in a highly motivated group, contact me (if you don't want supervision, contact me anyway).
Contact, Imprint |
