Interactive cyber-physical system hacking: Engaging students early using scalextric

White, Jonathan; Legg, Phil; Mills, Alan

Abstract

Cyber Security as an education discipline covers a variety of topics that can be challenging and complex for students who are new to the subject domain. With this in mind, it is crucial that new students are motivated by understanding both the technical aspects of computing and networking, and the real-world implications of compromising these systems. In this paper we approach this task to create an engaging outreach experience, on the concept of cyber-physical systems, using a Scalextric racetrack. In the activity, students seek to compromise the underlying computer system that is linked to the track and updates the scoreboard system, in order to inflate their own score and to sabotage their opponent. Our investigation with this technique shows high levels of engagement whilst providing an excellent platform for teaching basic concepts of enumeration, brute forcing, and privilege escalation. It also provokes discussion on how this activity relates to real-world cases of cyber-physical systems security in the sports domain and beyond.

• Presentation Conference Type: Conference Paper (published)
• Acceptance Date: Oct 28, 2022
• Online Publication Date: Mar 8, 2023
• Publication Date: Mar 8, 2023
• Deposit Date: Mar 14, 2023
• Publicly Available Date: Apr 9, 2023
• Journal: Journal of The Colloquium for Information Systems Security Education
• Peer Reviewed: Peer Reviewed
• Volume: 10
• Issue: 1
• Pages: 6
• DOI: https://doi.org/10.53735/cisse.v10i1.163
• Public URL: https://uwe-repository.worktribe.com/output/10533280
• Publisher URL: https://cisse.info/journal/index.php/cisse/article/view/163