Welcome to CISPA

This research area strives to develop disruptive new frameworks for reasoning about and improving security and privacy in information processing in various settings, efficiently and at scale.

The fragile security of today's IT infrastructure is the result of a perpetual arms race between attackers and defenders. Formal methods offer a way out of this arms race. Based on mathematically precise system and attacker models, we can systematically eliminate entire classes of attack strategies.

Attack-detection mechanisms should be able to reliably detect, predict, and understandably explain both known and novel threats, while also being able to cope with evasion techniques (like obfuscation, polymorphism, or stealth low-volume attacks).

Faulty computer systems allow for spying on, as well as sabotaging even the most security-critical infrastructures - this means that in daily life, our energy supply network, water supply, health network, communication network, transportation network, etc. are under continuous risk.

The vast growth in the complexity of modern applications and the multitude of available software technologies have created the need for engineering techniques that not only improve security, but also scale to the complexity of modern IT infrastructures.