Some of the listed Security Cards activities involve analysis in the context of a specific system. Below we suggest some potential systems that can be used as the focus of an activity. Presentations vary by system type, complexity and depth of description, and presentation length; as an instructor or facilitator, you will of course have a better idea of what is most suited for your audience. Please feel free to suggest example systems with pointers to videos or writeups describing those systems, along with pointers to overviews or analyses of threats to those systems.
System Overviews
I. Class Project or Team Product
If students are working on a particular class project (or if developers are working on a particular product), then this can be a natural fit as the subject of a Security Cards activity.
II. Automobiles
- Seattle Science Festival Tech Talk (~1 min). This video describes the computer systems in a modern car: http://youtu.be/y1oT9Q2rKkg?t=6m35s. See minutes 6:35 to 7:05. (Probably a bit more context is needed, e.g., about wireless connectivity - the additional context appears later in that video).
- OnStar Commercial (1:01 min).http://www.youtube.com/watch?v=hrOhcf-36Sk
- Ford Self-Park Commercial (0:30 min). http://www.youtube.com/watch?v=VdA2Uec5S7o
III. Home Security/Automation
- AT&T Digital Life/Home Automation Commercial (1:16 min). http://www.youtube.com/watch?v=B4GxIcc0AO4
- AT&T Digital Life Home Security Solutions Informational Video (1:52 min). http://www.youtube.com/watch?v=pHUP8UMAE8Q
- AT&T Digital Life Home Automation & Home Controls Informational Video (0:52 min). http://www.youtube.com/watch?v=_3p9-p0rem4
System Threat Analyses (Suitable for Activity Closure)
Depending on the activity, it may be appropriate to share with students past work on analyzing the security of examples of the system in question.
I. Class Project or Team Product
This will depend on the project or product in question. One potential in-class or take-home activity would be to assign groups to explore the threats to each others' systems.
II. Automobiles
- http://www.youtube.com/watch?v=y1oT9Q2rKkg (the entire video is 24:23 min).
- http://www.autosec.org/pubs/cars-usenixsec2011.pdf (16-page research paper)
III. Home Security/Automation
- http://cacm.acm.org/magazines/2013/1/158768-computer-security-and-the-modern-home/fulltext (9-page research article)