Exploratory Curriculum for Trustable Computing Systems Security Education

该项目的目标是引入计算机系统安全的新课程，作为一种教育工具，向学生介绍计算机系统安全，以及密集的硬件调试，逆向工程和关键分析。该项目提供了一种独特的方法，将新兴的硬件安全技术整合到工程课程中，以刺激这些未来工程师的创新、基于项目的创造性思维和终身学习。该项目采用了从教授计算机系统安全对策到通过实践经验学习“黑客”方法的模式转变。通过与传统课程的比较，提出了改进课程的建议：（1）开发课件和教学模块，要求深入研究计算机系统硬件安全和硬件提供的信任假设;（2）理解应对非传统攻击场景的对策和技术;（3）发展一种积极的“黑客”文化，同时仍然强调专业精神和道德;（4）发展一个高级设计顶点轨道，继续建立在硬件安全原则的基础上，并让学生接触创造性的创业思维;（5）开发适合非工科专业二年制大学生的教学模块。“黑客课程”框架中的教学模块具有可适应性，即使没有工科背景也可以使用。这一试验的成果和经验教训在期刊、会议和一个专门网站上传播。

The objective of this project is to introduce new courses in computer systems security that serve as an education tool to introduce students to computer systems security, as well as to intense hardware debugging, reverse engineering, and critical analysis. The project provides a unique approach by integrating emerging technologies of hardware security into engineering curricula to stimulate innovation, project-based creative thinking, and life-long learning for these future engineers. The project employs a paradigm shift from teaching computer systems security countermeasures to learning "hacker" methodologies through hands-on experiences. The outcomes are compared with traditional curriculum.The proposed curriculum improvements are achieved by: (1) developing courseware and teaching modules requiring intense study of computer systems hardware security and the trust assumptions provided by the hardware; (2) understanding countermeasures and techniques to address non-traditional attack scenarios; (3) developing a culture of aggressive "hacking" while still emphasizing professionalism and ethics; (4) developing a senior design capstone track that continues building on hardware security principles and exposes students to creative entrepreneurial thinking; and (5) developing modules that are adaptable for non-engineering students in 2-year colleges.The teaching modules in the "hacker curriculum" framework are adaptable and are accessible even without an engineering background. The outcomes and lessons learned in this experiment are disseminated in journals, conferences and on a dedicated website.