An Integrative Hands-on Approach to Vehicular Security Education

近年来，随着自动驾驶功能的爆炸性注入，汽车系统迅速发生了变化。这些功能集成了各种新的传感器、执行器、计算机元件、通信协议和软件。不幸的是，这一趋势也增加了这些系统对网络攻击的脆弱性。人们对汽车电子产品带来的网络安全挑战的认识有限，甚至在网络安全研究界也是如此。该项目将通过开发一个探索平台和一套实验来解决这一关键问题，以便能够传播车辆安全概念。该平台将面向与交通相关的STEM领域的多学科本科生。它可以部署为针对车辆安全的课程中的综合动手实验室。个别实验也可用于网络安全、硬件安全或无线网络课程，以及土木工程和机械工程系传统上开设的车辆系统课程。该平台的模块还可用于培训交通工程师、车载电子设计师和硬件和网络物理系统安全方面的从业者。该项目与国家科学基金会的使命密切一致，即在当今网络、分布式和异步的世界中实现一个真正安全的网络空间。它将促进为强大的、具有网络弹性的自主交通系统创造一支关键的劳动力队伍。此外，这些教材将使学生在一个前景看好的新兴市场上拥有强大的竞争优势，并帮助他们在学术界、工业界和公共部门发挥领导作用。该项目有三个技术目标。首先，它将创建一个统一的探索平台，涵盖新兴车辆系统中的各种安全概念，包括硬件、传感器、计算、网络和全平台级别。其次，它将创建一个通过实践学习平台有纪律地传播车辆安全概念的工具。学生们将有机会不仅了解已知的攻击，还将发现新的攻击和防御。这种身临其境的实践学习是教授车辆系统安全以及网络安全和硬件安全主题的一种截然不同的方法。第三，该项目将进行基于设计的研究和评估，将动手、沉浸式学习作为一种传播网络安全概念和促进不同学历背景的学生对网络安全学习的基本理解的机制。该项目得到安全和值得信赖的网络空间(SATC)计划的支持，该计划为解决网络安全和隐私问题的提案提供资金，在这个项目中，特别是网络安全教育。SATC计划与联邦网络安全研究和发展战略计划和国家隐私研究战略保持一致，以保护和维护网络系统日益增长的社会和经济效益，同时确保安全和隐私。该奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Automotive systems have rapidly transformed in recent years, with an explosive infusion of autonomous features. These features integrate a variety of new sensors, actuators, computer elements, communication protocols, and software. Unfortunately, this trend also has increased the vulnerability of these systems to cyber-attacks. There has been limited awareness of the cybersecurity challenges posed by automotive electronics, even within the cybersecurity research community. This project will address this crucial problem by developing an exploration platform and suite of experiments to enable the dissemination of vehicular security concepts. The platform will target multidisciplinary undergraduate students across STEM areas relevant to transportation. It can be deployed as a comprehensive hands-on lab in a course targeting vehicular security. Individual experiments can also be used in a cybersecurity, hardware security, or wireless networking course, on the one hand, and courses on vehicular systems traditionally offered in Civil and Mechanical Engineering departments on the other. Modules from the platform can also be used for training transportation engineers, vehicular electronics designers, and practitioners in the security of hardware and cyber-physical systems. The project aligns closely with the National Science Foundation's mission of achieving a "truly secure cyberspace in today's networked, distributed, and asynchronous world." It will facilitate the creation of a crucial workforce for robust, cyber-resilient autonomous transportation systems. Moreover, the educational materials will give students a strong competitive edge in a highly promising, emergent market and help them assume leadership roles in academia, industry, and the public sector.The project has three technical objectives. First, it will create a unified exploration platform covering the spectrum of security concepts in emerging vehicular systems, including hardware, sensor, compute, network, and full platform levels. Second, it will create a vehicle for disciplined dissemination of vehicular security concepts through a hands-on learning platform. The students will get a chance not just to comprehend known attacks but also to discover new attacks and defenses. This hands-on, immersive learning is a radically different approach to teaching vehicular systems security and cybersecurity and hardware security topics in general. Third, the project will conduct design-based research and evaluation of hands-on, immersive learning as a mechanism for disseminating cybersecurity concepts and promoting the fundamental understanding of cybersecurity learning for students with different academic backgrounds.This project is supported by the Secure and Trustworthy Cyberspace (SaTC) program, which funds proposals that address cybersecurity and privacy, and in this case specifically cybersecurity education. The SaTC program aligns with the Federal Cybersecurity Research and Development Strategic Plan and the National Privacy Research Strategy to protect and preserve the growing social and economic benefits of cyber systems while ensuring security and privacy.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.