EDU: Collaborative: Integrating Embedded Systems Security into Computer Engineering and Science Curricula

随着科技的进步，网络设备在社会中无处不在。这些设备不仅限于传统的计算机和智能手机，而且越来越多地扩展到涵盖各种嵌入式系统（ES），例如监测桥梁的传感器，控制汽车和工业设备运行的电子设备，不断向医生报告患者健康信息的家庭医疗设备。虽然联网电子系统的广泛部署极大地造福了人类生活和社会的各个方面，但它也带来了令人生畏的安全挑战，可能使国家安全和普通公民的隐私处于危险之中。充分解决这些挑战需要行业和ES设计人员开发先进的技术，以及对用户进行有关安全相关问题的良好教育。为了促进技术发展和更好地教育未来的设计师，本项目开发的课程侧重于新兴的ES安全的独特挑战，这在现有的计算机安全相关课程中没有系统地涵盖，强调计算机和传统互联网的安全性。本项目通过完成以下目标做出智力贡献：1)开发课程模块（课堂讲稿、实验和评估问卷），从软件、网络、操作系统、架构和硬件等层面介绍ES安全；2)将开发的材料整合到pi大学现有的几门本科课程中；3)整合已开发的课程模块，建立统一的计算机工程和计算机科学两个版本的ES安全课程；4)由外部咨询/审查委员会对开发的材料进行评估；5)采用项目式学习和翻转课堂教学相结合的教学方法；6)使用形成性和总结性方法评估拟议的教学方法；7)广泛传播已开发的材料，促进ES安全教育的多样性。每年将为100多名学生编写材料，其中包括许多少数民族和妇女。

With the advancement of technologies, networked devices become ubiquitous in the society. Such devices are not limited to traditional computers and smart phones, but are increasingly extended to cover a wide variety of embedded systems (ES), such as sensors monitoring bridges, electronics controlling the operation of automobiles and industrial equipment, home medicine devices that are constantly reporting patient health information to doctors. While the wide deployment of networked ES significantly benefits various aspects of human life and society at large, it also poses daunting security challenges that can put national security as well as the privacy of ordinary citizens at risk. Adequately addressing such challenges requires advanced technologies to be developed by industries and ES designers as well as users to be well educated about the security related issues. To facilitate technology development and better educate future designers, this project develops curricula focusing on the unique challenges of the emerging ES security, which has not been systemically covered in existing computer security related curricula that emphasize security in computers and the traditional Internet.This project makes intellectual contributions through the completion of the following objectives: 1) developing course modules (lecture notes, labs and evaluation questionnaire) to introduce ES security in the layers of software, networking, operating system, architecture, and hardware; 2) integrating the developed material into several existing undergraduate courses at PIs' Universities; 3) establishing a unified ES security course with two versions (computer engineering and computer science versions) by integrating the developed course modules; 4) getting the developed material evaluated by an External Advisory/Review Committee; 5) teaching the developed material using both project-based learning and flipped classroom learning; 6) assessing the proposed teaching methods using formative and summative approaches; 7) broadly disseminating the developed material and promoting diversity in ES security education. Material to be developed will reach over 100 students per year, including many minorities and women.