SaTC: EDU: Improving Student Learning through Competitive Embedded System Security Challenges

SaTC：EDU：通过竞争性嵌入式系统安全挑战提高学生学习水平

• 批准号: 1954259
• 负责人: Robert Karam
• 金额: $ 49.91万
• 依托单位: University of South Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-05-01 至 2024-04-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1954259&HistoricalAwards=false
• 关键词: SaTC; EDU; Improving; Student; Learning

Computers touch on nearly every aspect of modern life, from automotive and healthcare, to infrastructure and defense. The recent uptick in cybercrime highlights the increased demand for cybersecurity professionals for all aspects of computing - from software, to networking, and even the hardware itself. New courses are needed to improve existing computer science and engineering programs and provide both theoretical and practical, hands-on security experiences for students in these fields. In addition, new techniques for effective cybersecurity education are needed to improve student learning in this crucial area. This project will develop a hardware security lab course leveraging low-cost, open-source hardware and software, to enable more universities to integrate a hands-on hardware security course into their advanced undergraduate and graduate programs. The course will be used to test the effect of integrating game-based learning into hardware security education through an advanced curriculum of team-based, hands-on laboratory experiments and security challenges. Course materials will be made freely available, and results of this research will be shared widely by establishing new workshops and training seminars, and an annual competition to encourage continuous improvement in this critical area. The objective of this project is to investigate a game-based approach to hardware security education through an advanced curriculum of hands-on laboratory course modules and a final team-based “Hardware Capture the Flag” competition. The curriculum will be suitable for senior undergraduate and graduate students in computer engineering. The planned course modules cover a wide-range of topics related to hardware security, including physical and cross-layer security. Topics will be chosen to ensure that the largest possible number of students can benefit from the course by requiring only “accessible” equipment (i.e., relatively inexpensive, open-source, and easy to use) and providing an opportunity to learn practical skills that are transferable to any hardware-focused career. The impact of gamification on student learning will be tested by integrating game mechanics and competitions into selected labs, including race-against-the-clock, point scoring / leaderboard systems, red team / blue team, and collaborative analysis and learning. By integrating game-based learning in the proposed course, the project will investigate novel approaches to hardware education with a focus on security that can be replicated in other computer science and engineering departments to bolster student engagement and learning. This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

计算机几乎涉及现代生活的方方面面，从汽车和医疗保健到基础设施和国防。最近网络犯罪的上升凸显了对计算各个方面的网络安全专业人员的需求增加-从软件到网络，甚至硬件本身。需要新的课程来改进现有的计算机科学和工程项目，并为这些领域的学生提供理论和实践的实际安全经验。此外，需要有效的网络安全教育新技术来改善学生在这一关键领域的学习。该项目将开发一个硬件安全实验室课程，利用低成本的开源硬件和软件，使更多的大学能够将动手硬件安全课程整合到他们的高级本科和研究生课程中。该课程将用于测试通过基于团队的先进课程，动手实验室实验和安全挑战将基于游戏的学习融入硬件安全教育的效果。课程材料将免费提供，研究成果将通过举办新的讲习班和培训研讨会以及鼓励在这一关键领域不断改进的年度竞赛来广泛分享。该项目的目标是通过实践实验室课程模块的高级课程和最终的团队“硬件夺旗”竞赛，研究基于游戏的硬件安全教育方法。该课程将适用于计算机工程专业的高年级本科生和研究生。计划中的课程模块涵盖与硬件安全相关的广泛主题，包括物理和跨层安全。主题的选择将确保尽可能多的学生可以从课程中受益，只需要“可访问”的设备（即，相对便宜，开源，易于使用），并提供了一个学习实用技能的机会，这些技能可以转移到任何以硬件为中心的职业生涯中。游戏化对学生学习的影响将通过将游戏机制和比赛整合到选定的实验室来测试，包括与时间赛跑，得分/排行榜系统，红队/蓝队以及协作分析和学习。通过在拟议的课程中整合基于游戏的学习，该项目将研究硬件教育的新方法，重点是可以在其他计算机科学和工程部门复制的安全性，以加强学生的参与和学习。该项目得到了安全和值得信赖的网络空间（SaTC）计划的支持，该计划为解决网络安全和隐私问题的提案提供资金，在这种情况下，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Work-in-Progress: HyFlex Hands-On Hardware Security Education During COVID-19

正在进行的工作：COVID-19 期间的 HyFlex 硬件安全实践教育

• DOI: 10.1109/edunine53672.2022.9782346
• 发表时间: 2022
• 期刊: 2022 IEEE World Engineering Education Conference (EDUNINE
• 作者: Karam, Robert A.;Katkoori, Srinivas;Kermani, Mehran Mozaffari
• 通讯作者: Kermani, Mehran Mozaffari

Comprehensive Open-Source SCA Course Modules for Hands-On IoT Security Education

用于物联网安全实践教育的综合开源 SCA 课程模块

• 发表时间: 2022
• 期刊: IFIPIoT 2022
• 作者: Fernandes, A. Mateus;Olney, Brooks;Katkoori, Srinivas;Karam, Robert
• 通讯作者: Karam, Robert

Development of Course Modules in Python for Hardware Security Education

用于硬件安全教育的 Python 课程模块开发

• 发表时间: 2023
• 期刊: 2023 IEEE Southeast Conference
• 作者: Olney, Brooks;Fernandes A., Mateus A.;Karam, Robert
• 通讯作者: Karam, Robert

Improving Student Learning in Hardware Security: Project Vision, Overview, and Experiences

提高学生在硬件安全方面的学习：项目愿景、概述和经验

• DOI: 10.1109/ises54909.2022.00067
• 发表时间: 2022
• 期刊: 2022 IEEE International Symposium on Smart Electronic Systems (iSES
• 作者: Karam, Robert;Katkoori, Srinivas;Mozaffari-Kermani, Mehran
• 通讯作者: Mozaffari-Kermani, Mehran