Teaching Information Security Students to "Think thief"

We report on an educational experiment where information security master students were encouraged to think out of the box. Instead of taking the usual point of view of the security engineer we challenged the students to take the point of view of the motivated offender. We report on the exciting ideas our students came up with, and on the lessons we learned in designing the course.