Identifying Core Concepts of Cybersecurity: Results of Two Delphi Processes

Parekh, Geet; DeLatte, David; Herman, Geoffrey L.; Oliva, Linda; Phatak, Dhananjay S.; Scheponik, Travis; Sharman, Alan T.

doi:10.1109/te.2017.2715174

Cited by 41 publications

(32 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Although industry has been increasingly targeted by cybersecurity attacks, its security is not widely studied in IT university programs. In fact, few university programs have incorporated explicitly cybersecurity topics [27], despite considering such a field as a core competency of future IT engineers [28] and recognizing the existence of an increasing gap in qualified cybersecurity professionals [29].…”

Section: Iiot and Industry 40 Cybersecurity Teachingmentioning

confidence: 99%

Use Case Based Blended Teaching of IIoT Cybersecurity in the Industry 4.0 Era

Fernández‐Caramés

Fraga‐Lamas

2020

Applied Sciences

View full text Add to dashboard Cite

Industry 4.0 and Industrial Internet of Things (IIoT) are paradigms that are driving current industrial revolution by connecting to the Internet industrial machinery, management tools or products so as to control and gather data about them. The problem is that many IIoT/Industry 4.0 devices have been connected to the Internet without considering the implementation of proper security measures, thus existing many examples of misconfigured or weakly protected devices. Securing such systems requires very specific skills, which, unfortunately, are not taught extensively in engineering schools. This article details how Industry 4.0 and IIoT cybersecurity can be learned through practical use cases, making use of a methodology that allows for carrying out audits to students that have no previous experience in IIoT or industrial cybersecurity. The described teaching approach is blended and has been imparted at the University of A Coruña (Spain) during the last years, even during the first semester of 2020, when the university was closed due to the COVID-19 pandemic lockdown. Such an approach is supported by online tools like Shodan, which ease the detection of vulnerable IIoT devices. The feedback results provided by the students show that they consider useful the proposed methodology, which allowed them to find that 13% of the IIoT/Industry 4.0 systems they analyzed could be accessed really easily. In addition, the obtained teaching results indicate that the established course learning outcomes are accomplished. Therefore, this article provides useful guidelines for teaching industrial cybersecurity and thus train the next generation of security researchers and developers.

show abstract

Section: Iiot and Industry 40 Cybersecurity Teachingmentioning

confidence: 99%

Use Case Based Blended Teaching of IIoT Cybersecurity in the Industry 4.0 Era

Fernández‐Caramés

Fraga‐Lamas

2020

Applied Sciences

View full text Add to dashboard Cite

show abstract

“…Despite the increasing importance of cybersecurity, it is currently not taught extensively in many universities around the world. Some universities have incorporated cybersecurity topics in their study programs [18], but it is still difficult to determine which core competencies should be imparted and then find experts to teach them [19].…”

Section: Cybersecurity Teaching and Learningmentioning

confidence: 99%

Teaching and Learning IoT Cybersecurity and Vulnerability Assessment with Shodan through Practical Use Cases

Fernández‐Caramés

Fraga‐Lamas

2020

Sensors

View full text Add to dashboard Cite

Shodan is a search engine for exploring the Internet and thus finding connected devices. Its main use is to provide a tool for cybersecurity researchers and developers to detect vulnerable Internet-connected devices without scanning them directly. Due to its features, Shodan can be used for performing cybersecurity audits on Internet of Things (IoT) systems and devices used in applications that require to be connected to the Internet. The tool allows for detecting IoT device vulnerabilities that are related to two common cybersecurity problems in IoT: the implementation of weak security mechanisms and the lack of a proper security configuration. To tackle these issues, this article describes how Shodan can be used to perform audits and thus detect potential IoT-device vulnerabilities. For such a purpose, a use case-based methodology is proposed to teach students and users to carry out such audits and then make more secure the detected exploitable IoT devices. Moreover, this work details how to automate IoT-device vulnerability assessments through Shodan scripts. Thus, this article provides an introductory practical guide to IoT cybersecurity assessment and exploitation with Shodan.

show abstract

“…The Cyber Security Assessment Tools (CATS) project has undertaken a Delphi study identifying the importance, difficulty and timelessness of particular cyber security topics [5]. Such understanding is essential to the design of cyber security education programmes.…”

Section: Sidebar: Related Work On Identifying Core Concepts In Cyber mentioning

confidence: 99%