Skip to main content
Dashboard
Alle CS50-Kurse

5 Wochen · für Einsteigerinnen und Einsteiger jeden Alters

CS50 Cybersecurity – Einführung in Cybersicherheit

Konten, Daten, Systeme, Software und Privatsphäre aus Sicht von Risiken und Schutzmaßnahmen.

Offizielle Kursseite

Vollständiger Wochenüberblick

Jede Woche führt zu einer eigenen Lernlektion mit verständlicher Erklärung, Beispiel und Übung. Die offiziellen Vorlesungsseiten und Transkripte dienen als Quellenabgleich und sind freiwillige Vertiefung.

  1. Woche 0: Konten schützen

    Vorlesungsseite

    Authentication. Authorization. Usernames. Passwords. Dictionary Attacks. Brute-Force Attacks. Two-Factor Authentication (2FA). Multi-Factor Authentication: Knowledge; Possession; Inherence. One-Time Password (OTP). SIM Swapping. Keylogging. Credential Stuffing. Social Engineering. Phishing. Machine-in-the-Middle Attacks. Single Sign-On (SSO). Password Managers. Passkeys.

    Eigene Lernlektion: Kontosicherheit: Passwortmanager, MFA und Passkeys Öffentliches Transkript

  2. Woche 1: Daten schützen

    Vorlesungsseite

    Passwords. Hashing. Dictionary Attacks. Brute-Force Attacks. Rainbow Tables. Salting. One-Way Hash Functions. Cryptographic Hash Functions. Cryptography. Codes. Ciphers. Encryptiong. Decryption. Keys. Secret-Key Cryptography. Cryptanalysis. Public-Key Cryptography. RSA. Key Exchange. Diffie-Hellman. Digital Signatures. Passkeys. Encryption in Transit. End-to-End Encryption. Deletion. Secure Deletion. Full-Disk Encryption. Encryption at Rest. Ransomware. Quantum Computing.

    Eigene Lernlektion: Passwörter, MFA, Hashing und Verschlüsselung Öffentliches Transkript

  3. Woche 2: Systeme schützen

    Vorlesungsseite

    Encryption. Wi-Fi. Wi-Fi Protected Access. HTTP. Machine-in-the-Middle Attacks. Packet Sniffing. Cookies. Session Hijacking. HTTPS. TLS. Certificate. X.509. Certificate Authority (CA). SSL Stripping. HSTS. VPN. SSH. Port. Port Scanning. Penetration Testing. Ethical Hacking. Firewall. IP Address. Deep Packet Inspection. Proxy. Malware. Virus. Worm. Botnet. Denial-of-Service Attack (DoS). Distributed Denial-of-Service Attack (DDoS). Antivirus. Automatice Updates. Zero-Day Attacks.

    Eigene Lernlektion: Threat Modeling und Sicherheitsziele Öffentliches Transkript

  4. Woche 3: Software schützen

    Vorlesungsseite

    Phishing. Code Injection. Cross-Site Scriping (XSS): Reflected; Stored. Character Escapes. SQL Injection. Prepared Statements. Command Injection. system . eval . Developer Tools. Client-Side Validation. Server-Side Validation. Cross-Site Request Forgery (CSRF). GET. POST. Open Worldwide Application Security Project (OWASP). Arbitrary Code Execution (ACE). Remote Code Execution (RCE). Buffer Overflow. Stack Overflow. Cracking. Reverse Engineering. Malware Analysis. Open-Source Software. Closed-Source Software. App Stores. Package Managers. Operating Systems. Bug Bounty. Common Vulnerabilities and Exposures (CVE). Common Vulnerability Scoring System (CVSS). Exploit Prediction Scoring System (EPSS). Known Exploited Vulnerabilities Catalog (KEV).

    Eigene Lernlektion: Webrisiken: XSS, CSRF und Injection Öffentliches Transkript

  5. Woche 4: Privatsphäre wahren

    Vorlesungsseite

    Web Browsing History. Logs. HTTP Headers. Fingerprinting. Session Cookies. Tracking Cookies. Tracking Parameters. Third-Party Cookies. Private Browsing. Supercookies. DNS. DNS over HTTPS (DoH). DNS over TLS (DoT). Virtual Private Network (VPN). ToR. Permissions. Location-Based Services.

    Eigene Lernlektion: Systemhärtung, Netzwerke und Privatsphäre Öffentliches Transkript