Topics for smaller student projects

Practically implement and demonstrate the relay attacks in attested TLS for confidential computing

References:

• Security advisory
• CVE-2026-33697

• Programming in any language
• Some knowledge of TLS 1.3 is helpful but not mandatory.

Practically implement and do a security analysis of post-quantum attested TLS for confidential computing

• Programming in any language
• Some knowledge of TLS 1.3 is helpful but not mandatory.

Practically implement and demonstrate the diversion attacks

• Programming in any language
• Some knowledge of TLS 1.3 is helpful but not mandatory.

In order to bring non-scientists closer to ideas in the field of distributed systems, the visualization of a Kubernetes cluster is to be created. The whole thing is loosely inspired by this webcomic.

Interested parties will be able to change the cluster using a touchscreen. The effectiveness of confidential computing will also be demonstrated: Insight into non-confidential processes should be possible in the form of plain text, while only encrypted gibberish should be visible in confidential processes.

A presentation is planned for the Dresden Science Night (expected in 2026)

The task can be divided into three subtasks, each corresponding to the scope of one single project. If the module allows group work, it is also possible to work in a group of two or three people, whereby a group of two would only work on two of the three subtasks.

The level of difficulty is (depending on the subtask) Bachelor's to Master's level. Basic knowledge of HTTP queries is required, knowledge of Kubernetes, Helm, SCONE, graphics programming, programming with touchscreens or similar is helpful, but not necessary.

If the student has previous knowledge, two subtasks can also be combined into one bigger task, suitable for a Profilprojekt or Internship or similar