IoT Security Training
摘要
This chapter examines first the challenges associated with IoT security training compared with the general cybersecurity training, such as IoT device diversity and specific risks. This is followed by a discussion of other distinctive issues, both from a developer perspective (low barrier to entry and time to market pressure), and an end user perspective (user interface limitations, perception inertia and short life span), as well as possible solutions for these issues. The main IoT security training approaches are presented next, starting with those including hands-on practice that are available in academic and commercial backgrounds, and followed by hardware-based training systems. Then theoretical training approaches are discussed, including online courses and tabletop exercises, accompanied by a comparison of all the IoT training approaches that were examined. Lastly, a detailed case study of two IoT training systems, IoTrain-Sim and IoTrain-Lab, is presented to illustrate the various issues mentioned in the other sections. The characteristics of these two simulation and testbed-based training approaches are also compared.