Syllabus

Title
1841 Privacy and Security
Instructors
Dr. Benjamin Wagner
Contact details
Type
PI
Weekly hours
2
Language of instruction
Englisch
Registration
08/31/18 to 12/04/18
Registration via LPIS
Notes to the course
This class is only offered in winter semesters.
Dates
Day Date Time Room
Friday 12/07/18 02:00 PM - 06:00 PM D2.0.030
Tuesday 12/18/18 04:00 PM - 08:00 PM D2.0.030
Wednesday 12/19/18 12:15 PM - 03:00 PM D2.0.030
Monday 01/14/19 09:30 AM - 01:30 PM D2.0.030
Tuesday 01/22/19 04:00 PM - 08:00 PM D2.0.030
Wednesday 01/23/19 10:00 AM - 02:00 PM D2.0.030
Contents

Privacy and security are critical challenges for information systems and digital societies today. This course gives an overview of the privacy and security challenges we see today and how they can be addressed. Students learn about relevant privacy and security concerns and look into relevant technical, social and political aspects of privacy.




Class 1: Thinking about Security and Privacy as technical, social and political concepts
Class 2: Governing Privacy and Security: the EU GDPR, certification, standards and software liability
Class 3: Practical Assessment criteria: impact assessment, audits and evaluation 


Class 4: Building more secure software
Class 5: Privacy protection by design and by default 
Class 6: Sustainable computing solutions for Privacy and Security  
 

Learning outcomes

After attending this course, students will know about

 

  • privacy concerns in a technical, social and political context
  • international regulation of privacy and security
  • security issues and security enhancing technologies
  • privacy and security risk assessment methodology
  • sustainable solutions to promote privacy and security
     

In addition, this course fosters the following soft skills:

  • Analytical reasoning 
  • Presentation skills
  • Problem analysis
  • Developing concrete solutions to privacy and security challenges
Attendance requirements

It is only possible to miss one session of this course.

Teaching/learning method(s)

This course is highly interactive and each course meeting has a different emphasis. Student engagement is not optional but necessary.

The first half of the course will be focussed primarily on more theoretical ideas of privacy and security while the second half will primarily be practical about developing solutions to privacy and security challenges.

Assessment

Students will be evaluated on three contributions:

  • Individual project in writing: each student will conduct a rigorous impact assessment, audit or analysis of a specific information system and submit it in writing by the end of the course (40%)
  • Individual project presentation: each student will present their analysis to the group and update it based on the feedback they receive (30%) 
  • Class participation and engagement (30%)
     
Prerequisites for participation and waiting lists

Readings
1 Author: D.J. Solove
Title:

A Taxonomy of Privacy, University of Pennsylvania Law Review  154 (2006) 477-560


Year: 2006
Content relevant for class examination: Yes
Content relevant for diploma examination: No
Recommendation: Essential reading for all students
Type: Journal
2 Author: Bruce Schneider
Title:

Beyond Fear


Publisher: Springer
Year: 2006
Content relevant for class examination: Yes
Content relevant for diploma examination: No
Recommendation: Strongly recommended (but no absolute necessity for purchase)
Type: Book
3
Title:

Bieker, F., Friedewald, M., Hansen, M., Obersteller, H., & Rost, M. (2016). A process for data protection impact assessment under the European general data protection regulation. In Annual Privacy Forum(pp. 21–37). Springer.


Publisher: Springer
Content relevant for class examination: Yes
Content relevant for diploma examination: No
Recommendation: Strongly recommended (but no absolute necessity for purchase)
Type: Journal
4
5 Author: Spiekermann, S., & Oetzel, M. C.
Title:

Spiekermann, S., & Oetzel, M. C. (2012). Privacy-by-Design Through Systematic Privacy Impact Assessment – A Design Science Approach(SSRN Scholarly Paper No. ID 2050872). Rochester, NY: Social Science Research Network. Retrieved from http://papers.ssrn.com/abstract=2050872


Year: 2012
Content relevant for class examination: Yes
Content relevant for diploma examination: No
Recommendation: Strongly recommended (but no absolute necessity for purchase)
Type: Journal
6 Author: Mantelero, A
Title:

Mantelero, A. (2016). Personal data for decisional purposes in the age of analytics: From an individual to a collective dimension of data protection. Computer Law and Security Review32(2), 238–255. https://doi.org/10.1016/j.clsr.2016.01.014


Content relevant for class examination: Yes
Content relevant for diploma examination: No
Recommendation: Strongly recommended (but no absolute necessity for purchase)
Type: Journal
7
Title:

Hempel, L., Ostermeier, L., Schaaf, T., & Vedder, D. (2013). Towards a social impact assessment of security technologies: A bottom-up approach. Science and Public Policy40(6), 740–754. http://spp.oxfordjournals.org/content/40/6/740.short


Content relevant for class examination: Yes
Content relevant for diploma examination: No
Recommendation: Strongly recommended (but no absolute necessity for purchase)
Type: Journal
Availability of lecturer(s)

By appointment

Last edited: 2018-07-04



Back