EdX

Introduction to Software Side Channels and Mitigations (edX)

Offered by Graz University of Technology, TUGrazX,
Introduction to Software Side Channels and Mitigations (edX)

Side channels exist in the real world, but they also exist in computers and can be exploited directly from software. This is a substantial computer security problem today, that we need to learn about to be able to stop attacks. In this course, you will learn and practice basic software-based side channels and understand the thought process to utilize a side channel. You will then learn how to mitigate or avoid side channels in software.

Class Deals by MOOC List - Click here and see EdX's Active Discounts, Deals, and Promo Codes.

Same as the prerequisite course, we do not just enumerate side-channel effects and how to exploit them. We provide you with the experience of learning about side channels, in a group of students, living in a shared appartment. Together with them you will figure out that what software side channels are, why they are relevant for cybersecurity, in particular in our modern digital lifes, where all our secrets are stored on computers that can be subverted using side channels.
In this course, we get one step closer to hugely impactful attacks like Meltdown and Spectre, which internally use side channels. We will learn about different simple software-based side channels and how they can be exploited. We will cover the basics, requiring some programming skills. We again focus on the security or side-channel mindset, as a crucial take-away for you, that you will be able to apply on a day-to-day basis in your studies, your job, and your personal life. You will extend your view on side channels and be able to assess risks in technical contexts in detail. In a set of small exercises, you will demonstrate that you understood the basics, and are able to find and exploit side channels in small software programs.
This course is part of the Side Channel Security Basics Professional Certificate.

Prerequisites:
Knowledge and skills from the prerequisite course Side Channel Security S1: Side Channel and Computer Security Mindset.
We expect basic programming skills that you may have obtained as part of a university program such as computer science or a high school degree with a focus on computer science.

What you'll learn

  • Spot and exploit side-channel leakage in simple software programs
  • Use different software-based side channels to extract secret information
  • Connect these security risks with methods to mitigate and close side channels

Syllabus

  • Episode 1: Raiders of the Lost Account

Manuel loses access to his online account. In a search to recover it, the flat mates discover how to get from small variations in the execution to a side-channel attack on the PIN entry.

  • Episode 2: Memory

Claudio runs a course grading server. Our flat mates set out to find a flaw in it and discover a new means of attacking software, by flushing and reloading memory (the so-called Flush+Reload attack).

  • Episode 3: Not on my Watch

Lukas and Andreas miss a deadline and use Flush+Reload to still get a signature on their assignments even though the deadline has passed.

  • Episode 4: Justice Leak

Claudio's course grading server corrupts an assignment, leading to an unfair zero points for some flat mates. They try to get justice and their points back, by using Flush+Reload again.

  • Episode 5: Flush+Reload: Endgame

With all these attacks, and specific mitigations against them, the flatmates discuss possible generic mitigations against Flush+Reload.

Go to Class
MOOC List is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Related Courses

Cybersecurity Capstone and Case Studies (edX) EdX
IBM

Cybersecurity Capstone and Case Studies (edX)

Security & Networking

Research real-world data breaches and explore different incident response methodologies and security models. This course is part of the IBM Cybersecurity Analyst Professional Certificate! Throughout this course, you will delve into incident response methodologies and security models through case studies, equipping yourself with effective strategies for handling security incidents. You will also learn to identify and categorize various types of vulnerabilities and associated attacks commonly faced by modern organizations.

Self Paced
Self-Paced
Security Cybersecurity Cyber Attacks
Details
Information Security - Introduction to Information Security (edX) EdX
New York University,NYUx

Information Security - Introduction to Information Security (edX)

Security & Networking

Learn the fundamentals of information security, including Security Design Principles, Threat Modeling and Security Policy. This is a self-paced course that provides an introduction to information security and cybersecurity. Students gain a broad overview of Information Security and Privacy (ISP) through high-level ISP concepts. We discuss both traditional design principles and principles that were developed to design secure systems.

Self Paced
Self-Paced
Security Information Security Cybersecurity
Details
Introduction to Cloud Computing (edX) EdX
IBM

Introduction to Cloud Computing (edX)

Security & Networking

Master the core concepts in Cloud Computing, from service and deployment models, to cloud architecture, security, new technologies, and possible careers. This course introduces you to the core concepts of cloud computing. You will gain the foundational knowledge required for understanding cloud computing from both business and practitioner perspectives.

Self Paced
Self-Paced
Security SaaS Cloud Computing
Details
Building a Cybersecurity Toolkit (edX) EdX
University of Washington,UWashingtonX

Building a Cybersecurity Toolkit (edX)

Security & Networking

Develop a set of skills and characteristics that expand beyond technical proficiency to become a successful cybersecurity professional. Technologies are always being defeated. If you own an information asset that’s valuable enough to the right adversary, it’s only a matter of time before there’s a breach. Today’s technologies attempt to keep adversaries out, but the sad fact is they will inevitably be defeated. This means a successful cybersecurity professional needs to have an expanded arsenal in their toolkit that extends far beyond technical proficiency.

Self Paced
Self-Paced
Security Cybersecurity Essentials of Cybersecurity Professional Certificate
Details
Network Security - Introduction to Network Security (edX) EdX
New York University,NYUx

Network Security - Introduction to Network Security (edX)

Security & Networking

Learn fundamentals of network security, including a deep dive into how networks are attacked by malicious users. This is a self-paced course that provides an introduction to network security topics. The curriculum focusses on how malicious users attack networks. The material is essential in later classes that will develop ethical hacking skills. Students are introduced to some key concepts in network security. Next, we provide an overview of network reconnaissance strategies.

Self Paced
Self-Paced
Security Networks DNS
Details
Web Security Fundamentals (edX) EdX
KU Leuven University

Web Security Fundamentals (edX)

Security & Networking

Essential knowledge for every web developer, discover important principles of modern web security, and learn about current security best practices. Web applications are inherently insecure, as aptly illustrated by a pile of recent events. Insecurity is however not fundamental to the web platform. As a matter of fact, the modern web offers a variety of powerful security features that help stop a hacker. Unfortunately, not many developers have the knowledge and skills to leverage these security features to their full potential.

No sessions available
5-12 Weeks
Security Web Applications Web Security
Details