Study Guide

Objective

Student is familiar with typical vulnerabilities and attack surfaces of IoT systems.
Student can perform a systematical assessment, categorization and priorization of IoT system threats.
Student is familiar with common tools for vulnerability testing.

Content

IoT system architecture
Systematic threat analysis
Device layer vulnerabilities and mitigation
Communication layer vulnerabilities and mitigation
Application layer vulnerabilities and mitigation

Materials

Cisco network academy material www.netacad.com

Teaching methods

Self-study network material
Lectures
7 laboratory sessions

Exam schedules

Week 43

International connections

Lab works
lectures
self study

Completion alternatives

-

Student workload

lab works 7x3h = 21h
lectures 6x2h = 12h
exam = 2h
selfstudy = 74h
exam preparation 26h
TOTAL 135h

Content scheduling

Learning outcomes:
Conduct end-to-end security assessments of IoT systems to demonstrate vulnerabilities.
Gain hands-on experience with IoT prototypes using a Raspberry Pi.
Recommend threat mitigation measures to minimize the risk in IoT solutions and networks.
Become proficient using real-world penetration and vulnerability testing tools such as Kali Linux.
S1/2019

Further information

-

Evaluation scale

H-5

Assessment methods and criteria

Must pass Final Exam:
60% -> 1
68% -> 2
76% -> 3
84% -> 4
92% -> 5
Mandatory lab works: +/- 2 grades from individual Lab performance
Mandatory lectures, must attend 70%

Assessment criteria, fail (0)

Failed Final Exam <60%
or
Weak Final exam < 76% + poor lab performance (missing labs, nonprofessional attitude or lack of active problem-solving, missed lectures)

Assessment criteria, excellent (5)

Excellent Final Exam >92%
and
expected lab performance (all labs done with average performance)
or
Good Final Exam >76%
and
superb lab performance (all labs done, actively learns new skills outside of the lab scope, is able to help fellow students, attended all lectures)

Qualifications

Basic skills in using both Windows and Linux systems
Basic networking skills (Cisco CCNA1 or similar)
Basic programming skills with some high level programming language (for example Python, Java, C# or similar)
Basic programming skills include (but are not limited to): output formatting, conditional execution, loops, functions/procedures, function parameters and return values, arrays, error handling, testing and good programming policies
Sufficient logical-mathematical thinking skills
Sufficient skills in English language (lectures and all materials are in English)