E. Gaining Security Expertise

Abstract

Security patterns capture knowledge of security experts. Security patterns contain solutions for recurring security problems. Besides, they don’t exist in isolation and show relations to other security patterns. Thus, it requires a certain degree of expertise to understand the nature of security patterns, to define syntax and semantics of them and to contribute to an overall security pattern system. In this chapter we show different ways the author followed in order to gain security know-how and practical skills. Hereby, the education of students played an important role. In particular, he planed, organized and carried out the security workshop Hacker Contest and supervised a couple of security-related Master Theses. Furthermore, he worked in certain research projects analyzing, developing and implementing security solutions. These efforts are briefly introduced in the following.