Computer and Control Engineering

- (Pseudo)Randomness - Data Integrity - Data Confidentiality - Standards for data protection - Common Attacks and Countermeasures - Secure Software Life Cycle - Software Testing (from theory aspects to hands-on fuzzing) - Memory and Type Safety - Run-time Mitigations for Program Hardening

Fundamental knowledge: - C programming - Develop/compile/link software cycle - Computer architectures - TCP/IP Useful knowledge: - ASM x86

Slides and resources made available by the instructors

Attending the lectures is highly recommended, but not compulsory.

The practical exam consists of answering questions at the computer and lasts two hours.

Face-to-face lectures, exercises, and hands-on activities.

Threat Model, Adversaries, Hardness, Assumptions Randomness, Pseudorandomness and Secrets (Symmetric) Data Encryption and MAC Cryptographic Hashing and Applications Key Exchange and Digital Signatures PKIX, TLS, HTTPs Side-Channel, Replay, Sybil and Human-in-the-middle Attacks Anonymity and Anti-Censorship Identification: PEC/SPID/PassKey/EIDAS (2h Theory)

algorithms and data structures, operating systems

Slides and resources that the lecturer will make timely available to the students.

Attendance is strongly recommended but not mandatory.

Specific questions will require answers spanning over a large part of the program of the course. The final evaluation will take into account the quality of each answer and the overall view inferred by them.

The Joy of Cryptography by Mike Rosulek - https://joyofcryptography.com/

Lectures will consist of illustrating the contents of slides and of a whiteboard (and/or a graphics tablet) with interaction and practical examples.