EDU: Collaborative: Integrating Embedded Systems Security into Computer Engineering and Science Curricula

随着技术的进步，网络设备变得无处不在。这些设备不仅限于传统的计算机和智能手机，而且越来越多地扩展到涵盖各种各样的嵌入式系统（ES），例如监控桥梁的传感器，控制汽车和工业设备运行的电子设备，不断向医生报告患者健康信息的家庭医疗设备。虽然广泛部署的网络ES显着有利于人类生活和社会的各个方面，但它也带来了严峻的安全挑战，可能使国家安全以及普通公民的隐私处于危险之中。成功地解决这些挑战需要由行业和ES设计人员开发的先进技术，以及用户对安全相关问题的良好教育。为了促进技术发展和更好地教育未来的设计师，本项目开发了课程，重点关注新兴的ES安全的独特挑战，这在强调计算机和传统互联网安全的现有计算机安全相关课程中没有系统地涵盖。本项目通过完成以下目标做出智力贡献：1）开发课程模块（课堂讲稿、实验室和评估问卷）介绍ES在软件、网络、操作系统、体系结构和硬件层面的安全性; 2）将开发的材料整合到PI大学现有的几门本科课程中; 3）建立统一的ES安全课程，两个版本（计算机工程和计算机科学版本）通过整合开发的课程模块; 4）获得外部咨询/审查委员会评估的开发材料; 5）使用基于项目的学习和翻转课堂学习来教授开发的材料; 6）使用形成性和总结性方法评估拟议的教学方法; 7）广泛传播已开发的材料，促进ES安全教育的多样性。每年将有100多名学生，包括许多少数民族和妇女，收到编写的材料。

With the advancement of technologies, networked devices become ubiquitous in the society. Such devices are not limited to traditional computers and smart phones, but are increasingly extended to cover a wide variety of embedded systems (ES), such as sensors monitoring bridges, electronics controlling the operation of automobiles and industrial equipment, home medicine devices that are constantly reporting patient health information to doctors. While the wide deployment of networked ES significantly benefits various aspects of human life and society at large, it also poses daunting security challenges that can put national security as well as the privacy of ordinary citizens at risk. Adequately addressing such challenges requires advanced technologies to be developed by industries and ES designers as well as users to be well educated about the security related issues. To facilitate technology development and better educate future designers, this project develops curricula focusing on the unique challenges of the emerging ES security, which has not been systemically covered in existing computer security related curricula that emphasize security in computers and the traditional Internet.This project makes intellectual contributions through the completion of the following objectives: 1) developing course modules (lecture notes, labs and evaluation questionnaire) to introduce ES security in the layers of software, networking, operating system, architecture, and hardware; 2) integrating the developed material into several existing undergraduate courses at PIs' Universities; 3) establishing a unified ES security course with two versions (computer engineering and computer science versions) by integrating the developed course modules; 4) getting the developed material evaluated by an External Advisory/Review Committee; 5) teaching the developed material using both project-based learning and flipped classroom learning; 6) assessing the proposed teaching methods using formative and summative approaches; 7) broadly disseminating the developed material and promoting diversity in ES security education. Material to be developed will reach over 100 students per year, including many minorities and women.