This is a graduate level course that is focusing on security and privacy issues in complex socio-cyber-physical systems from the threat modeling perspective. The students will learn and apply a systematic security and privacy threat modeling approach, and at the same time be exposed to and learn about a selection of the standard security and privacy problems, attacks, and development challenges. The course will also expose the students to a selection of the current security and privacy research and development challenges.

1. Be able to identify and fix security and privacy threats
2. Learn to use practical and actionable tools, techniques, and approaches for security and privacy
3. Explore the nuances of software-centric security and privacy threat modeling and discover its application to software and systems during the build phase and beyond
4. Apply threat modeling to improve security and privacy when managing complex systems
5. Manage potential security and privacy threats using a structured, methodical framework
6. Discover and discern evolving security and privacy threats

According to the examination regulation full attendance is intended for a PI. 80% attendance required to pass the course.

The required textbook for this course is “Threat Modeling: Designing for Security,” 1st Edition, by Adam Shostack, Wiley, ISBN-13: 978-1118809990. The required textbook will be complemented by a selection of additional readings as required by the current offering of the course.

There will be three 5 evaluations:

1.       Project deliverable 1 (week 4; 10 marks; minimum 3 references)

2.       Midterm Exam (week 7; 15 marks)

3.       Project deliverable 2 (week 8; 15 marks; minimum 10 references)

4.       Project deliverable 3 (week 12; 25 marks; minimum 20 references)

5.       Final Exam (exam week; 35 marks)

Grading Criteria 

unsatisfactory: ≤ 60%

sufficient: > 60 % to ≤ 70 %

satisfactory: > 70 % to ≤ 80 %

good: > 80 % to ≤ 90 %

excellent: > 90 %

Please log in with your WU account to use all functionalities of read!t. For off-campus access to our licensed electronic resources, remember to activate your VPN connection connection. In case you encounter any technical problems or have questions regarding read!t, please feel free to contact the library at readinglists@wu.ac.at.

Tutor for the security and privacy class: Ms. Coco Koban

coco.koban@wu.ac.at