Core Module Information
Module title: Security Systems for IoT

SCQF level: 10:
SCQF credit value: 20.00
ECTS credit value: 10

Module code: CSN10108
Module leader: Baraq Ghaleb
School School of Computing, Engineering and the Built Environment
Subject area group: Cyber Security and Systems Engineering

Module Code CSN08102 and CSN09112
Module Title Practical Networks 2 and Network Security and Cryptography.

Description of module content:

The aim of the module is to develop a deep understanding of issues related to IoT security and privacy that will allow graduates to act professionally in the analysis of vulnerabilities of IoT systems as well as the design and the implementation of security countermeasures for such systems. An outline of the main areas includes: IoT communication technologies (6LowPAN, Bluetooth, LoRa, ZigBee) and their security provisions, major attack against the 6LowPAN stack including resource , traffic and topology attacks, latest advancements in IoT security countermeasures, and IoT privacy concerns and incident response. The module practical side will allow the students to experiment with major attacks and build suitable countermeasures on both simulated and real hardware environments.

Learning Outcomes for module:

Upon completion of this module you will be able to
LO1: Develop advanced knowledge, of major security attacks against standardized IoT protocols.
LO2: Develop advanced knowledge, and critically evaluate security provisions of Internet of Things (IoT) technologies.
LO3: Develop in-depth understanding of the major privacy issues of IoT.
LO4: Research and critically evaluate security countermeasures to the major security IoT attacks.

Full Details of Teaching and Assessment
2022/3, Trimester 1, FACE-TO-FACE, Edinburgh Napier University
Occurrence: 002
Primary mode of delivery: FACE-TO-FACE
Location of delivery: MERCHISTON
Partner: Edinburgh Napier University
Member of staff responsible for delivering module: Baraq Ghaleb
Module Organiser:

Learning, Teaching and Assessment (LTA) Approach:
This is very much a hands-on approach to learning with a large proportion of the time devoted to the development of practical
and theoretical skills. This is intermixed with a lecture program that aims to introduce and develop the core principles of IoT
security systems. In general lectures are used to introduce advanced methods and techniques to provide data security in IoT
systems. The practical and tutorial work is then used to broaden and develop deeper understanding of the subject area. (LO1,
LO2, LO3). The module has a significant practical element in that 30% of the technical content will be delivered during lab
sessions in which students are expected to complete exercises involving system design, device programming and encryption
Moodle is used as the central repository for all courseware and is used to encourage discussion forums on current module
issues as well as related topics and wider resources.

Formative Assessment:
Formative assessment takes place during the timetabled tutorial sessions where students are expected to present evidence of
practical work. Feedback is provided to students on a one-to-one basis through discussion during tutorial sessions with the
class tutor allowing individual strengths and weaknesses highlighted in timely fashion. The overall objective here is that any
remedial study can be put in place at the earliest possible point in the delivery of the module.

Summative Assessment:
Summative assessment is implemented through a combination of class tests and a practical coursework exercises:

The class tests are scheduled to take place during week 7 and week 13 and are a closed-book test with a duration of 90 minutes for each (LO 1, 2, 3). These are an essay style tests.

Practical coursework (LO1, 3) requires the development of a report related to IoT technologies, security and attacks as well as experimenting with such attacks. Some of this work is formally supervised to ensure that progress is being made and that the work is of the correct standard. Feedback is routinely given to all students on a one-to-one basis, and is delivered during the timetabled practical sessions. In practice, the coursework progress is monitored at several points throughout its development with individual and group feedback provided though ongoing discussions with the class tutor.

Student Activity (Notional Equivalent Study Hours (NESH))
Mode of activityLearning & Teaching ActivityNESH (Study Hours)
Face To Face Lecture 24
Face To Face Practical classes and workshops 24
Independent Learning Groupwork (Scheduled) 152
Total Study Hours200
Expected Total Study Hours for Module200

Type of Assessment Weighting % LOs covered Week due Length in Hours/Words
Practical Skills Assessment 50 1,2,4 11 HOURS= 00.00, WORDS= 2000
Centrally Time Tabled Examination 50 1,2,3,4 14/15 HOURS= 02.00, WORDS= 0
Component 1 subtotal: 50
Component 2 subtotal: 50
Module subtotal: 100

Indicative References and Reading List - URL: