Curriculum Development for Embedded Systems Security

The paper describes issues involved in the development of a modular curriculum for embedded systems security. The topics selected in the first round include: (1) General educational modules on security, such as "General Introduction to Computer Security", "Introduction to Cryptography" and "Embedded Systems Security"; (2) Security of specific technologies used in embedded systems, which in this edition involve "FPGA Security", "RFID Security" and "SCADA Security"; and (3) Software aspects of embedded systems security, such as "Java Security" and "Threat Modeling." Each module includes the following components: Objectives, Introduction, Student Activities composed of Suggested Readings and Hands-on Exercise, and Assessment. Eight modules developed thus far have been tested in undergraduate courses on embedded systems and computer networks at one academic institution, and are currently being revised for testing at other universities across the nation. They are all available on the Internet and are being expanded to cover aspects specific to cyberphysical systems security.