We Advance IT Security
The Information Security Research Group of the InIT is the first address for education and applied research and development in the field of information security in the Zurich area and beyond. Our vision is to combine science and practice to develop innovative security solutions for companies and the public to ensure the cyber security of tomorrow.
The knowledge gained from applied research and development also flows into our educational programs in the Bachelor's, Master's, PhD and Continuous Education program.
The Information Security research group is part of the ZHAW Cybersecurity Community.
Security by Design
In the area of security by design, we develop systems and methods that integrate security into the design process from the outset. This includes systems with security functions, such as cybersecurity management systems for organizations or systems to support analysts in a Security Operation Center (SOC), as well as systems in which security is only a means to an end, such as the development of secure communication networks or the secure processing of sensitive data.
A current project in this research area:
In the HD.ng++ project we develop a system to support a cybersecurity analyst in a Security Operations Center (SOC). The developed system provides meta-information about domains and IP addresses to support SOC analysts in the investigation of potentially malicious domains or IP addresses.
Security Analysis
In the field of security analysis, we examine systems for potential vulnerabilities. We are interested in a wide range of systems, from hardware-based communication systems to applications and firmware on mobile devices to web applications. We use our specialist knowledge for the analysis and develop systems that search for vulnerabilities as automatically as possible. Through our work, we can warn those affected of potential threats while advancing the state of the art of analysis tools.
A current project in this research area:
In the FirmewareDroid project, we identify the current difficulties and limitations that hinder security researchers in performing a dynamic analysis of pre-installed Android software components, such as pre-installed apps or native libraries. Based on the results of a literature review, we derive potential solution ideas and develop a concept for a security testing framework that enables researchers to dynamically test pre-installed Android software. We test the concept with proof-of-concept prototypes that demonstrate the feasibility of our basic solution ideas. We then use these prototypes to analyze a large data collection of Android firmware for potential vulnerabilities.
Continuing Education
Our CAS Applied IT Security (German only) offers the opportunity to computer scientists, practitioners and career changers the opportunity to build and enhance their foundation in IT Security, one of the most important growth markets in IT. Participants will be introducted into security architecture and management, cryptology and network security as well as software and systems security. They will be given the opportunity to apply their new skills in extensive and practice oriented labs.
-
Dynamic Analysis of Internal Android Systems
In this project, we focus on the current state of Android security. One main focus will be to determine current difficulties and limitations that hinder security researchers in performing a dynamic analysis of Android pre-installed software components such as pre-installed apps or native libraries. In a first step, ...
-
Automated Information Security Governance and Risk Management
-
CYREN ZH: Cyber Resilience Network For The Canton Of Zurich
How can we better protect ourselves from cyber threats? The answer to this question is as complex as cyber security itself, because the right balance must always be found between technical possibilities and political, social and economic interests. The increasing digitalisation of critical infrastructures in ...
-
Gür, Gürkan; Porambage, Pawani; Osorio, Diana Moya; Yavuz, Attila A.; Liyanage, Madhusanka,
2024.
6G security vision : a concise update [paper].
In:
2023 IEEE Future Networks World Forum (FNWF).
IEEE Future Networks World Forum, Baltimore, USA, 13-15 November 2023.
IEEE.
Available from: https://doi.org/10.1109/FNWF58287.2023.10520627
-
Deniz, Eren; Cantali, Gokcan; Ozay, Ozcan; Yildirim, Onur; Gür, Gürkan; Alagoz, Fatih,
2024.
Towards data analytics based PIM detection in wireless networks [paper].
In:
2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD).
28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), Edinburgh, United Kingdom, 6-8 November 2023.
IEEE.
pp. 1-6.
Available from: https://doi.org/10.1109/CAMAD59638.2023.10478405
-
Sutter, Thomas; Kehrer, Timo; Rennhard, Marc; Tellenbach, Bernhard; Klein, Jacques,
2024.
Dynamic security analysis on Android : a systematic literature review.
IEEE Access.
12, pp. 57261-57287.
Available from: https://doi.org/10.1109/ACCESS.2024.3390612
-
Kalla, Anshuman; de Alwis, Chamitha; Gochhayat, Sarada Prasad; Gür, Gürkan; Liyanage, Madhusanka; Porambage, Pawani,
2024.
Emerging directions for blockchainized 6G.
IEEE Consumer Electronics Magazine.
13(2), pp. 42-51.
Available from: https://doi.org/10.1109/MCE.2022.3164530
-
Rüedlinger, Andreas; Klauser, Rebecca; Lamprakis, Pavlos; Happe, Markus; Tellenbach, Bernhard; Veyisoglu, Onur; Trammell, Ariane,
2024.
FeedMeter : evaluating the quality of community-driven threat intelligence [paper].
In:
Proceedings of the 10th International Conference on Information Systems Security and Privacy - ICISSP.
10th International Conference on Information Systems Security and Privacy (ICISSP), Rome, Italy, 26-28 February 2024.
SciTePress.
pp. 54-66.
Available from: https://doi.org/10.5220/0012357600003648