Secure Infrastructure

The research group Secure Infrastructure at Fraunhofer AISEC conducts research on applied cryptography and the impact of artificial intelligence on secure infrastructures. The research focus lies on the Internet of Things, post-quantum security and anonymization networks. Furthermore we are pioneers in the field of post-quantum security for virtual private networks.

We collaborate with companies from the high-security industry and providers or operators of critical infrastructures.

The learning lab in Weiden is one of the few research facilities in the field of IT security in the northern Upper Palatinate and offers an extended IT security lab in modern premises directly in the eHouse at the campus of the East Bavarian Technical University Amberg-Weiden (OTH AW). The laboratory is specially designed for the analysis of IT systems in the context of pentests.

Furthermore, dedicated training courses in the field of IT security can be held at the location in the so-called cybersecurity learning lab: Training participants can put the training content into practice using various exercises in the 90 m² training area.

For further information please visit our German website.

Our goal is to work closely with our customers and partners to systematically improve the ability to assess the security of systems and products to evaluate system reliability, design systems securely, and sustainably maintain security throughout the lifecycle.

Evaluate security     

• Evaluation of security concepts and architectures
• Accompanying Common Criteria evaluations
• Penetration testing of IT components and networks

Design security

• Investigation and design of secure network protocols
• Security protocols for the Internet of Things
• Post-quantum security in computer networks
  

Maintain security

• Intrusion detection and intrusion prevention
• Live testing of cryptographic methods

Security analysis

The department Secure Infrastructure has extensive expertise in the field of security analysis. This applies both practically in the form of penetration tests for corporate networks and software products as well as conceptually in the form of semi-formal analyses. The latter include in particular the creation and verification of security concepts. This can be based on different security standards, which are relevant for security certifications, for example. Extensive expertise in supporting Common Criteria evaluations is also available.

Applied cryptography

In the area of applied cryptography, we have extensive expertise in the secure application of cryptographic methods. In particular, we are able to put novel post-quantum protocols into practice in order to meet relevant regulatory requirements of national security authorities.