"Hacking an IoT Home": New opportunities for cyber security education combining remote learning with cyber-physical systems

Legg, Phil; Higgs, Thomas; Spruhan, Pennie; White, Jonathan; Johnson, Ian

Abstract

In March 2020, the COVID-19 pandemic led to a dramatic shift in educational practice, whereby home-schooling and remote working became the norm. Many typical schools outreach projects to encourage uptake of learning cyber security skills therefore were put on hold, due to the inability to physical attend and inspire. In this short paper, we describe a new approach to teaching cyber security with a view of inspiring a new generation of learners to the subject. Traditional Capture-The-Flag exercises are widely used in cyber security education, whereby a series of challenges are completed to gain access and obtain a passphrase from a computer system. We couple this approach with interactive sessions made possible via video conferencing platforms such as Microsoft Teams and Zoom, along with the very nature of being in the home environment, where home IoT devices are now commonplace. We develop an integrated CTF for the home IoT environment, where students can observe the impact of submitting flags via online video, to physical adjust the home environment - ranging from switching off lights, playing music, or controlling an IoT-enabled robot. The result is a highly interactive and engaging experience that benefits from the very nature of remote working, inspiring the notion of "hacking an IoT home".

Citation

Legg, P., Higgs, T., Spruhan, P., White, J., & Johnson, I. (2021). "Hacking an IoT Home": New opportunities for cyber security education combining remote learning with cyber-physical systems. In 2021 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA). https://doi.org/10.1109/CyberSA52016.2021.9478251

• Conference Name: 2021 International Conference on Cyber Situational Awareness, Data Analytics and Assessment, CyberSA 2021
• Start Date: Jun 14, 2021
• End Date: Jun 18, 2021
• Acceptance Date: Apr 16, 2021
• Online Publication Date: Jul 12, 2021
• Publication Date: Jul 12, 2021
• Deposit Date: May 4, 2021
• Publicly Available Date: Aug 13, 2021
• Book Title: 2021 International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA)
• ISBN: 9781665430920
• DOI: https://doi.org/10.1109/CyberSA52016.2021.9478251
• Public URL: https://uwe-repository.worktribe.com/output/7337416