School of Engineering

Information Security

We Advance IT Security

The Information Security Research Group of the InIT is the first address for education and applied research and development in the field of information security in the Zurich area and beyond. Our vision is to combine science and practice to develop innovative security solutions for companies and the public to ensure the cyber security of tomorrow.

The knowledge gained from applied research and development also flows into our educational programs in the Bachelor's, Master's, PhD and Continuous Education program.

The Information Security research group is part of the ZHAW Cybersecurity Community.

 

Research Topics

Security by Design

In the area of security by design, we develop systems and methods that integrate security into the design process from the outset. This includes systems with security functions, such as cybersecurity management systems for organizations or systems to support analysts in a Security Operation Center (SOC), as well as systems in which security is only a means to an end, such as the development of secure communication networks or the secure processing of sensitive data.

A current project in this research area:

In the HD.ng++ project we develop a system to support a cybersecurity analyst in a Security Operations Center (SOC). The developed system provides meta-information about domains and IP addresses to support SOC analysts in the investigation of potentially malicious domains or IP addresses.

Security Analysis

In the field of security analysis, we examine systems for potential vulnerabilities. We are interested in a wide range of systems, from hardware-based communication systems to applications and firmware on mobile devices to web applications. We use our specialist knowledge for the analysis and develop systems that search for vulnerabilities as automatically as possible. Through our work, we can warn those affected of potential threats while advancing the state of the art of analysis tools.

A current project in this research area:

In the FirmewareDroid project, we identify the current difficulties and limitations that hinder security researchers in performing a dynamic analysis of pre-installed Android software components, such as pre-installed apps or native libraries. Based on the results of a literature review, we derive potential solution ideas and develop a concept for a security testing framework that enables researchers to dynamically test pre-installed Android software. We test the concept with proof-of-concept prototypes that demonstrate the feasibility of our basic solution ideas. We then use these prototypes to analyze a large data collection of Android firmware for potential vulnerabilities.

Continuing Education

CAS Applied Network & System Security: This page is not available in English. Please refer to the German page.

CAS Secure Software Design & Development: This page is not available in English. Please refer to the German page.

Projects