Robert Luh

Education

Digital forensics, malware analysis and fundamentals at USTP, IT forensics for police investigators, and a game for learning attack and defence.

USTP – University of Applied Sciences St. Pölten

Teaching at USTP

Robert is academic director of the IT Security bachelor’s programme. He teaches in the IT Security and Smart Engineering bachelor’s programmes and the Information Security and Cyber Security and Resilience master’s programmes, and supervises bachelor’s and master’s theses in digital forensics and malware analysis.

Digital forensics

IT Security (BA), since 2014

  • Forensic principles and the chain of custody
  • Acquiring memory and disk images
  • Memory analysis
  • File and operating systems
  • Browsers, messengers and OS utilities as evidence
  • Windows and Linux triage
  • Recognising and applying anti-forensics
  • Forensic report writing

Reverse engineering and malware analysis

Information Security (MA), since 2014

  • Static and dynamic analysis
  • Behaviour-based analysis of system and API calls
  • Persistence, process hiding and rootkits
  • Sandboxes, traces and visual analytics
  • From observed behaviour to detection

Fundamentals

Smart Engineering (BA), since 2019

  • Computer-science fundamentals for engineers
  • How attacks work, from reconnaissance to impact
  • Protection goals and threat models
  • Security of industrial systems (IT Security BA, since 2016)

RIISC · Landespolizei Schleswig-Holstein

IT forensics for cybercrime investigators

The Research Institute for IT-Security and Cybercrime (RIISC) in Kiel trains officers of the Landespolizei Schleswig-Holstein for cybercrime investigation. The programme runs from computer-science basics to penetration testing and combines on-site weeks, supervised self-study, module exams and a final thesis.

Robert has taught the IT forensics module since 2021: securing digital evidence, analysing it and reconstructing what happened.

  1. Computer science basics
  2. Operating and file systems
  3. Networking
  4. IT forensics
  5. Cybersecurity and penetration testing

Courses over the years

  1. since 2021IT forensics trainingLandespolizei Schleswig-Holstein, via RIISC
  2. since 2019Computer Science FundamentalsSmart Engineering (BA), USTP
  3. since 2016IT Security for Industrial SystemsIT Security (BA), USTP
  4. since 2014Reverse Engineering and Malware AnalysisInformation Security (MA), USTP
  5. since 2014Digital ForensicsIT Security (BA), USTP
  6. 2020–2023BiometricsIT Security (BA), USTP
  7. 2020–2021Digital Forensics for IT and OTProject InduSec, USTP
  8. 2016–2020Malware AnalysisComputer Science (MSc), De Montfort University, Leicester
  9. 2019Advanced Network & Industrial CommunicationsInformation Security (MA), USTP
  10. 2018Introduction to Informatics and AlgorithmsData Science (BA), USTP
  11. 2015–2018Digital Forensics and Malware AnalysisComputer Science (BA), FH Kiel
  12. 2014–2015Memory forensics and network forensicsProject LIVEFOR, USTP

Teaching with games

Learning security by playing it

Attack and defence are easier to understand when you have to make the decisions yourself. PenQuest puts students on either side of a simulated network and is used in university courses, awareness training and risk workshops.

About PenQuest

Related papers