Ciberseguridad en Iot

Understand the importance of cybersecurity in IoT.
Know the security model and attack surfaces in IoT.
Learn to analyze, evaluate and classify the risks and vulnerabilities of an IoT system.
Know the current regulations on cybersecurity in IoT.

Introduction:
* Contextualization.
* Fundamentals of cybersecurity.

Security in IoT:
* IoT Security Model and attack surfaces.
* R&D&i in IoT Security.

Regulations:
* Legal aspects.
* Vulnerability scan.
* Risk assessment.

Basic bibliography:

* Brian Russell, Drew Van Duren (2016). Practical internet of things security. Packt Publishing Ltd

* Dykstra, Josiah (2016). Essential Cybersecurity Science: Build, Test, and Evaluate Secure Systems. O'Reilly Media

* Christina Skouloudi, Apostolos Malatras. ENISA IoT Security team (2018). Introduction to IoT security. ENISA-FORTH NIS Summer

Complementary biography:

* Boeckl, Katie et al. (2019). Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks. NISTIR 8228

* CCN-CERT (2017). CCN-CERT BP-05: Informe de Buenas Prácticas en Internet de las Cosas. CCN

CNC03 - To identify the basic concepts of cybersecurity for IoT. TYPE: Knowledge or content.

HBL03 - To analyze the cybersecurity risks of an IoT system. TYPE: Skills.

HBL12 - To apply the acquired knowledge and to solve problems in new or unfamiliar environments within broader and multidisciplinary contexts, integrating knowledge effectively. TYPE: Skills .

CMP07 - To ensure the security of information generated by IoT devices. TYPE: Competencies.

Guest lecture / keynote speech:

The university virtual platform will be used as a basis to publish all the required material to follow the lectures. In the lectures, the theoretical contents of the subject are presented, necessary to understand the logic and operation of the different protocols and systems, as well as to carry out the laboratory practices.

Laboratory practice:

The university virtual platform will be used as a basis to publish all the required material to do the laboratory practices. In laboratory practices, students must delve into certain theoretical aspects of the subject.

Supervised projects:

The university virtual platform will be used as a basis to publish all the required material for the completion of the supervised projects by the students.
Students are required to carry out a practical task in this work where they must solve a series of problems appropriately. It is necessary for them to produce a report that is technically detailed, well-structured, and well-written, detailing the process used to resolve the problem.

* Laboratory practice (20%):

It corresponds to the continuous monitoring of the students' work for the completion of both the practical test and the supervised project.
Monitoring is carried out during practical hours and, if applicable, through a defense with the practical teaching staff or an oral presentation.

* Supervised proyects (20%):

Related to the theoretical-practical content of the subject, these works allow students to consolidate the knowledge obtained in both theoretical and practical lessons.
To finish the work, the report must be delivered on time, with care taken for both the writing and content presented.

* Practical test (20%):

An exam on the content of the practical cases seen on the subject. This exam measures how well students can translate theoretical content into practice.

* Objective test (40%):

At the end of the two-month period, an exam is taken where students must demonstrate their knowledge of the subject. It may contain both theoretical and practical questions. This part is mandatory and you must obtain a minimum of 4 (out of 10) to pass the subject.

ASSESSMENT COMMENTS:

To pass the subject, you must obtain a minimum of 5 out of 10 in the sum of all parts of the subject and obtain a minimum of 4 out of 10 in the objective test. If the minimum score is not obtained in this test, the subject is considered failed and the final grade is the one obtained in this objective test.

Second opportunity: Students will have to take the objective test and may choose to keep the practical grade obtained during the teaching period of the subject, or discard this grade and evaluate the practical part through a practical test and/or the delivery of practices.

All aspects related to “academic dispensation”, “dedication to study”, “permanence” and “academic fraud” will be governed in accordance with the current academic regulations of the three SUG universities.

Total time: 112,5 hours
4,5 ECTS

Work planning (ordinary class hours + student's personal work)

Guest lecture / keynote speech: 16 hours + 16 hours
Laboratory practice: 14 hours + 28 hours
Supervised projects: 1 hour + 9 hours
Practical test: 1 hour + 7 hours
Objective test: 3 hours + 15 hours

Personalized attention: 2,5 hours
Personalized attention is essential for the correct development of the subject by students. In addition, attendance at student tutorials is recommended as a support method. From the teacher's point of view, personalized attention allows us to detect possible imbalances in the methodology of the subject and improve quality continuously. In the virtual classroom of the subject, information regarding the teaching staff's tutoring schedule will be indicated.

Subjects that it is recommended to have taken before:

Communications Protocols for IoT/614557006
IoT Devices/614557001
IoT Communications Networks/614557002

It is suggested to have knowledge of English as a language for understanding written texts, given that part of the bibliography recommended for this subject is written in this language.

This subject follows the current values and guidelines established by the SUG universities, advocating respect and equality.