• search hit 1 of 2
Back to Result List

A Cybersecurity Education Platform for Automotive Penetration Testing

  • The paper presents a penetration testing framework for automotive IT security education and evaluates its realization. The automotive sector is changing due to automated driving functions, connected vehicles, and electric vehicles. This development also creates new and more critical vulnerabilities. This paper addresses a possible countermeasure, automotive IT security education. Some existing solutions are evaluated and compared with the created Automotive Penetration Testing Education Platform (APTEP) framework. In addition, the APTEP architecture is described. It consists of three layers representing different attack points of a vehicle. The realization of the APTEP is a hardware case and a virtual platform referred to as the Automotive Network Security Case (ANSKo). The hardware case contains emulated control units and different communication protocols. The virtual platform uses Docker containers to provide a similar experience over the internet. Both offer two kinds of challenges. The first introduces users to a specific interface, while the second combines multiple interfaces, to a complex and realistic challenge. This concept is based on modern didactic theories, such as constructivism and problem-based/challenge-based learning. Computer Science students from the Ostbayerische Technische Hochschule (OTH) Regensburg experienced the challenges as part of a elective subject. In an online survey evaluated in this paper, they gave positive feedback. Also, a part of the evaluation is the mapping of the ANSKo and the maturity levels in the Software Assurance Maturity Model (SAMM) practice Education & Guidance as well as the SAMM practice Security Testing. The scientific contribution of this paper is to present an APTEP, a corresponding learning concept and an evaluation method.

Export metadata

Additional Services

Share in Twitter Search Google Scholar Statistics
Metadaten
Author:Philipp Fuxen, Stefan Schönhärl, Jonas Schmidt, Mathias Gerstner, Sabrina Jahn, Julian Graf, Rudolf Hackenberg, Jürgen MottokORCiDGND
URL / DOI:http://www.iariajournals.org/security/sec_v15_n34_2022_paged.pdf
ISSN:1942-2636
Parent Title (English):International Journal On Advances in Security
Publisher:IARIA
Document Type:Article
Language:English
Year of first Publication:2022
Release Date:2023/01/30
Tag:Automotive; Challenge-based Learning; Education Framework; IT-Security Education; Penetration Testing
Volume:15
Issue:3&4
First Page:106
Last Page:118
Institutes:Fakultät Elektro- und Informationstechnik
Fakultät Informatik und Mathematik
Fakultät Informatik und Mathematik / Labor Informationssicherheit und Complience (ISC)
Fakultät Elektro- und Informationstechnik / Laboratory for Safe and Secure Systems (LAS3)
research focus:Lebenswissenschaften und Ethik
Licence (German):Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG