The course presents formal and cryptographic methods for modeling and analyzing security-critical systems. The first and main part of the course will focus on cryptographic protocols. In the second part formal methods in other fields of information security, such as access control, will be presented.