Fundamentals of electronics and iot securitySyllabus

Subject code

İF-2213y

Credits

5

Student workload

105

Semester

Spring semester

Academic year

3

Subject type

Mandatory

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

a) 30 saat - mühazirə b) 15 saat - seminar

Out-of-class hours

a) 65 saat - TSİ b) 40 saat - MRTSİ

The subject provides students with the formation of theoretical knowledge and practical skills on the basic principles of electronics, microcontrollers, the structure of iot (internet of things) systems and ensuring their security. within the subject, working principles of electronic components and microcontrollers, architecture of iot devices, methods of interaction between devices, wired and wireless network technologies, physical interfaces and communication protocols are studied. identification and authentication mechanisms used in iot systems, strengths and weaknesses of various protocols and communication technologies, as well as the principles of choosing the configuration of iot networks are reviewed. key security threats, vulnerabilities, and cyberattacks, threat modeling, security risk assessment, vulnerability detection, and incident investigation techniques targeting iot systems and radio-electronic environments are explored. also, the principles of planning information protection measures in iot systems, designing, building, tuning and managing security components, applying standard information protection tools and ensuring continuous operation of systems are studied. the subject is aimed at developing students' skills in analyzing the security of iot systems, choosing appropriate network and security configurations, assessing vulnerabilities and developing appropriate protective measures against identified risks.

• lecture
• presentations
• seminar
• interactive discussion

1. 1

   CLO 1: Knows basic electronic components, logic circuits, converters, resistors, capacitors, transistors, inductive coils, diodes, and is able to build circuits using them.

2. 2

   CLO 2: Able to use simulation software to observe and perform tests on electronic circuits.

3. 3

   CLO 3: You can use measuring instruments to measure the basic quantities of electrical circuits.

4. 4

   CLO 4: Must be familiar with different protocols for data exchange between devices.

5. 5

   CLO 5: Must be aware of different technologies for wireless communication between devices.

6. 6

   CLO 6: He should learn information security issues related to iot devices, know possible cyber-attacks against them and methods of defense against them.

1. 1.
   Introduction to the subject. iot applications, iiot and fundamentals of electronicsLecture

   The purpose, structure and main learning directions of the subject are presented within the subject. the concepts of iot and industrial internet of things (iiot), the main application areas and the general structure of iot systems are reviewed. the relationship between iot technologies and electronics, the basic electrical and electronics concepts necessary for the operation of iot devices are explained. the basic principles of digital logic and the role of logic elements in electronic systems are investigated. it also reviews the typical hardware structure of an iot device, the main hardware components such as sensors, actuators, processing units, memory, power supply and communication modules.

2. 2.
   Microcontrollers and interfacesLecture

   Within the topic, the concept of microcontroller, the architecture of microcontrollers and their role in the construction of iot devices are studied. major hardware components such as the processor core, memory, i/o ports, timers, and communication interfaces are reviewed. basic principles of microcontroller programming, development of software code and interaction with hardware components are explained. key features, capabilities, and applications of the arduino, esp8266, esp32, and stm32 microcontroller platforms, as well as the raspberry pi single-board computer, are explored. also, the computing capabilities, communication interfaces, energy consumption and usage characteristics of different platforms in iot projects are compared.

3. 3.
   Iot architecturesLecture

   Within the topic, the concept of iot architecture, the main components of iot systems and architectural models are studied. in iot systems, interactions between devices, communication networks, data processing and application levels are considered. the structure, levels and application characteristics of three-layer, five-layer and other n-layer iot architectures are explained. event-driven architecture (eda) principles of event creation, transmission and processing, as well as service-oriented architecture (soa) structure based on organization and interaction of services are investigated. also, different iot architecture models are compared in terms of flexibility, scalability, interoperability and application characteristics.

4. 4.
   Sensors and actuators. iot communication technologiesLecture

   Within the scope of the topic, the role, main functions and types of sensors and actuators in iot systems are studied. the principles of sensors collecting data from the physical environment by measuring temperature, humidity, pressure, movement, light and other indicators are reviewed. actuators affect physical processes based on control signals, their main types and control mechanisms are explained. the interaction of sensors and actuators with microcontrollers and other iot components is explored. it also reviews the working principles, application features and selection criteria of the main wired and wireless communication technologies that provide data exchange between iot devices.

5. 5.
   Azərbaycan imperiyası səfəvi və əfşar sülalələri dövründə (xvi-xviii əsrin birinci yarısıSeminar

   Azərbaycan imperiyası səfəvi və əfşar sülalələri dövründə mövzusu bu mərhələdə azərbaycanın siyasi tarixini, dövlət quruculuğu proseslərini və idarəetmə xüsusiyyətlərini öyrənir. mövzuda səfəvilər və əfşarlar dövründə mərkəzləşmiş hakimiyyətin formalaşması, hərbi-siyasi gücün artırılması və dövlət idarəçilik sisteminin əsas prinsipləri araşdırılır. həmçinin, bu sülalələrin həyata keçirdiyi daxili və xarici siyasət, ərazi genişlənməsi və beynəlxalq münasibətləri təhlil edilir. dövrün sosial, iqtisadi və mədəni inkişaf xüsusiyyətləri, eləcə də dövlətçilik ənənələrinin qorunması və davam etdirilməsi məsələləri diqqət mərkəzində saxlanılır. mövzunun öyrənilməsi azərbaycan dövlətçilik tarixində səfəvi və əfşar dövlətlərinin rolunu və onların imperiya idarəçilik ənənələrinə təsirini anlamağa imkan verir.

   • • ftn1: azərbaycan tarixinin dövrlərinin əsas mahiyyəti izah edilir.
   • • ftn2: azərbaycan tarixi üzrə bəzi mübahisəli məsələlərə aydınlıq gətirilir.
   • • ftn5: tələbələrə qədim tariximizin müasir dövrlə uzlaşdırılması vərdişləri aşılanır.
   • • ftn3: tələbələrin bu və ya digər məsələlərlə bağlı obyektiv mövqeyini formalaşmasına nail olunur.
   • • ftn4: tələbələrin ən azından minimum məlumat əldə etməsi, mövzular ətrafında öz fikrinin formalaşmasının səviyyəsi yoxlanılır.
6. 6.
   Iot security modelsLecture

   Within the subject, the security architecture of iot systems and the main security models are studied. security requirements, threats and defense mechanisms arising at different architectural levels of iot systems are reviewed. multi-level security approaches covering device, network, platform, application and data layers are explained in securing iot. the OWASP iot top 10 examines key security risks for iot systems, the key principles of the NIST iot cybersecurity framework, and enisa's iot security recommendations. also, different security models and frameworks are compared in terms of scope, application goals, and role in assessing the security of iot systems.

7. 7.
   Device level securityLecture

   Within the scope of the topic, the concept of security at the device level in iot systems and the main security risks specific to this level are studied. considering the physical and hardware characteristics of iot devices, the principles of building threat models at the device level and identifying the main attack surfaces are reviewed. security risks related to physical tampering, debugging interfaces, memory components, and other hardware resources are explained at the hardware level. at the software (firmware) level, issues related to unreliable and outdated firmware, insecure update mechanisms, internal data protection and firmware integrity are investigated. basic hardware and firmware security mechanisms are also reviewed to enhance security at the device level.

8. 8.
   Communication and identity securityLecture

   The main principles of communication and identification security in iot systems are studied within the subject. ensuring the privacy, integrity and authenticity of data exchange between iot devices, creating secure communication channels and the main threats to the communication process are considered. the security risks associated with the identification of devices and users in iot systems, the management of unique identifiers, and the connection of fraudulent devices to the system are explained. authentication mechanisms based on passwords, certificates, cryptographic keys, and other credentials are explored. also, considering the limited resources of the iot environment, the selection of appropriate identification and authentication mechanisms and the principles of secure implementation are considered.

9. 9.
   Introduction to iot penetration testingLecture

   The purpose, scope and main features of penetration tests in iot systems are studied within the topic. the differences of iot penetration testing from traditional information systems security testing and the multi-level assessment approach covering the device, hardware, firmware, communication, network, platform and application levels are reviewed. the basic methodology of iot penetration testing, the stages of the testing process and the principles of security assessment planning are explained. identification of system components, assets, possible threats and attack surfaces is investigated through threat modeling. also, the principles of developing a leak test plan based on defining the leak test objectives, scope, methods to be applied, limitations and expected results are reviewed.

10. 10.
    Iot hardware penetration testsLecture

    In the framework of the topic, the basic principles of hardware and software security assessment in iot devices, as well as hardware-level penetration testing are studied. the purpose, scope, and planning of iot hardware penetration tests are reviewed, identifying key hardware components of the device and potential attack surfaces. the detection of debug interfaces such as uart, jtag, and SWD and the security risks they pose are explained. it also examines the security assessment of the boot process of the device, the working principles of the secure boot mechanism and the verification of its correct implementation. the impact of identified vulnerabilities at the hardware and software level on the overall security of the device is considered.

11. 11.
    Firmware leak testsLecture

    Within the topic, the concept of firmware, its role in the operation of iot devices and security features are studied. the firmware attack surface, which consists of firmware components, file systems, configuration data, software libraries, and other internal resources, is considered. the basic methodology of firmware leak testing, the stages of acquiring firmware, determining its structure and composition, static and dynamic analysis, and evaluation of discovered vulnerabilities are explained. it also examines key firmware security risks such as hard-coded credentials, insecure configurations, outdated software components, failure to protect confidential data, and insecure update mechanisms.

12. 12.
    Cloud and api-based iot attacksLecture

    The topic examines the role of cloud services and apis in building iot systems, device management and data exchange, as well as the security risks associated with these components. the critical importance of apis in the interaction between iot devices, cloud platforms and applications is considered. key attack scenarios such as weak authentication and authorization, insecure API endpoints, access control issues, data leakage, and abuse of apis are explained. iot security risks related to misconfigurations, weak access controls, credential hijacking, and lack of data protection in cloud environments are explored. also reviewed are key defense strategies such as strong authentication and authorization, the principle of least privilege, limiting API accesses, secure configuration, data encryption, monitoring, and logging.

13. 13.
    Отношения азербайджана с государством сасанидов и арабским халифатом.Lecture

    5.изучение исторических событий и исторических личностей, государственных деятелей и полководцев в период с III по IX вв. взаимоотношение азербайджанских государств с соседями, захваты сасанидов и арабского халифата, экономика, культура, религиозные реформы и изменения этническом составе и языке.

    • • род 5: применять навыки сопоставления и установления взаимосвязей между древней историей азербайджана и современным периодом.
    • • род 1: объяснять основные характеристики периодов истории азербайджана.
    • Род 2: анализировать и разъяснять отдельные дискуссионные вопросы истории азербайджана.
    • • род 3: формировать объективную и аргументированную позицию по отдельным вопросам истории азербайджана.
    • • род 4: демонстрировать базовый уровень знаний по изучаемым темам и формулировать собственную аргументированную позицию по рассматриваемым вопросам.
14. 14.
    Network and protocol penetration testingLecture

    In the framework of the topic, the purpose, scope and main differences of network and protocol penetration tests in iot systems are studied. network penetration tests consider the security assessment of network topology, active devices, open ports, services, and network configurations. in protocol penetration tests, security risks related to the structure of communication protocols used between iot devices, message exchange, authentication, encryption and access control mechanisms are investigated. principles of network and protocol level traffic analysis, identification of weak configurations and insecure communication mechanisms are explained. also, network and protocol penetration tests are compared in terms of scope, test objects, and evaluation approaches.

1. Chantzis f., stais i., calderon p., deirmentzoglou e., & woods b., practical iot hacking: the definitive guide to attacking the internet of things. no starch press, 2021, 464 p.
2. Platt c., make: electronics. 2nd edition. o'reilly, 2015, 850 p.
3. Owasp iot security testing guide, 2024, 87 p.
4. Etter d., iot security: practical guide book. independent publishing platform, 2016, 63 p
5. Waher p., learning internet of things. packt pub ltd, 2015, 242 p.
6. Jain s., lakshmi v., srivathsa r. i., iot and OT security handbook: assess risks, manage vulnerabilities, and monitor threats with microsoft defender for iot. pact publishing; 1st edition, 2023, 172 p.
7. Cirani s., ferrari g., picone m., veltri l., internet of things for architects: architectures, protocols and standards. john wiley & sons, 2018 394 p.