EDU: Collaborative: Integrating Embedded Systems Security into Computer Engineering and Science Curricula

随着技术的进步，网络设备在社会上变得无处不在。这类设备并不局限于传统的计算机和智能手机，而是日益扩展到涵盖各种嵌入式系统，如传感器监控桥、控制汽车和工业设备运行的电子设备、不断向医生报告患者健康信息的家庭医疗设备。虽然网络ES的广泛部署极大地造福于人类生活和整个社会的各个方面，但它也带来了令人望而生畏的安全挑战，可能会危及国家安全和普通公民的隐私。要充分应对这些挑战，需要各行业和专家系统设计者开发先进技术，并对用户进行与安全有关的问题的良好教育。为了促进技术发展和更好地培养未来的设计者，本项目开发了侧重于新兴ES安全的独特挑战的课程，现有的强调计算机和传统互联网安全的计算机安全相关课程没有系统地涵盖这一挑战。本项目通过完成以下目标做出智力贡献：1)开发课程模块(课堂讲稿、实验和评估问卷)，从软件、网络、操作系统、体系结构和硬件层面介绍ES安全；2)将开发的材料整合到PIS大学现有的几门本科课程中；3)通过整合开发的课程模块，建立统一的ES安全课程，有两个版本(计算机工程和计算机科学版本)；4)让外部咨询/审查委员会对开发的材料进行评估；5)使用基于项目的学习和翻转课堂学习来教授开发的材料；6)使用形成性和总结性的方法对拟议的教学方法进行评估；7)广泛传播开发的材料，促进ES安全教育的多样性。要开发的材料每年将惠及100多名学生，其中包括许多少数族裔和妇女。

With the advancement of technologies, networked devices become ubiquitous in the society. Such devices are not limited to traditional computers and smart phones, but are increasingly extended to cover a wide variety of embedded systems (ES), such as sensors monitoring bridges, electronics controlling the operation of automobiles and industrial equipment, home medicine devices that are constantly reporting patient health information to doctors. While the wide deployment of networked ES significantly benefits various aspects of human life and society at large, it also poses daunting security challenges that can put national security as well as the privacy of ordinary citizens at risk. Adequately addressing such challenges requires advanced technologies to be developed by industries and ES designers as well as users to be well educated about the security related issues. To facilitate technology development and better educate future designers, this project develops curricula focusing on the unique challenges of the emerging ES security, which has not been systemically covered in existing computer security related curricula that emphasize security in computers and the traditional Internet.This project makes intellectual contributions through the completion of the following objectives: 1) developing course modules (lecture notes, labs and evaluation questionnaire) to introduce ES security in the layers of software, networking, operating system, architecture, and hardware; 2) integrating the developed material into several existing undergraduate courses at PIs' Universities; 3) establishing a unified ES security course with two versions (computer engineering and computer science versions) by integrating the developed course modules; 4) getting the developed material evaluated by an External Advisory/Review Committee; 5) teaching the developed material using both project-based learning and flipped classroom learning; 6) assessing the proposed teaching methods using formative and summative approaches; 7) broadly disseminating the developed material and promoting diversity in ES security education. Material to be developed will reach over 100 students per year, including many minorities and women.