IoT Security

Takes place in HWS2020


Lecturers:  Dr. Vasily Mikhalev, Dr. Matthias Hamann, Christian Müller

Aim of Module

The Internet of Things is one of the principal trends in information technology nowadays. The main idea behind this concept is that devices communicate autonomously with each other over the Internet. Some of these devices have extremely limited resources, such as power and energy, available time for computations, amount of silicon to produce the chip, computational power, etc. Classical cryptographic primitives are often infeasible for such constrained devices. This often results in the situation when devices appear on the market without enough protection meauseres, which leads to attacks. The goal of lightweight cryptography is to introduce cryptographic solutions with reduced resource consumption, but with a sufficient security level. 

The course provides an introduction to the security of Internet of Things (IoT).  It covers the following topics:

  • Relevant attacks in the modern Industrial and Consumer IoT environments
  • Programming of IoT devices
  • Cryptography suitable for devices with constrained resources
  • Implementation techniques targeting different goals
  • IoT standards and protocols
  • Lecture and Exercise

    • Thursdays: 13:45–15:15h,
    • Fridays: 13:45–15:15h

    Please note:

    Lectures are taken place in the room C-109 in the building A5

  • Learning Goals

    Learning outcomes and qualification goals

    The successful participants will be able to understand the main attacks on IoT devices and countermeasures against them.  They will also learn how to program IoT Devices targetting different optimization goals.


    The course consists of lectures and exercises. At the exercise sessions the students will learn how to implement cryptographic algorithms on Arduino Uno devices which will be distributed to each participant. Each student will also receive an individual practical task that needs to be accomplished until the end of the term and the report has to be submitted.


  • Prerequisites

    The formal prerequisites are the good programming skills in C or C++.

    However, the knowledge in cryptography or IT-security is recommended, e.g., by attending the lectures “Cryptography I” , “Selected Topics in IT-Security” or “Data Secuirity and Privacy”.