Information
| Unit | INSTITUTE OF NATURAL AND APPLIED SCIENCES |
| COMPUTER ENGINEERING (MASTER) (WITH THESIS) (ENGLISH) | |
| Code | CENG522 |
| Name | IoT Security and Privacy |
| Term | 2026-2027 Academic Year |
| Term | Spring |
| Duration (T+A) | 3-0 (T-A) (17 Week) |
| ECTS | 6 ECTS |
| National Credit | 3 National Credit |
| Teaching Language | İngilizce |
| Level | Belirsiz |
| Type | Normal |
| Mode of study | Yüz Yüze Öğretim |
| Catalog Information Coordinator | Dr. Öğr. Üyesi SEDAT BİLGİLİ |
| Course Instructor |
The current term course schedule has not been prepared yet.
|
Course Goal / Objective
The aim of this course is to introduce security and privacy issues in Internet of Things systems and to provide the ability to analyze threats targeting such systems. The course covers IoT device security, wireless communication security, authentication, data confidentiality, privacy risks, attack types, secure protocol usage, and IoT security architectures.
Course Content
Introduction to IoT security, IoT threat models, device security, security constraints in embedded systems, wireless network security, IEEE 802.15.4 security, security issues in 6LoWPAN and RPL, CoAP and MQTT security, authentication and authorization, data confidentiality, privacy risks, botnet attacks, firmware security, secure update mechanisms, IoT security standards, and case studies.
Course Precondition
No prerequisites.
Resources
1. Brian Russell, Drew Van Duren, Practical Internet of Things Security, Packt Publishing 2. Arshdeep Bahga, Vijay Madisetti, Internet of Things: A Hands-On Approach, Universities Press, 2014
Notes
1. ENISA IoT Security documents 2. IETF IoT Security RFC documents
Course Learning Outcomes
| Order | Course Learning Outcomes |
|---|---|
| LO01 | Explains the fundamental security issues in IoT systems |
| LO02 | Analyzes threats and attack types targeting IoT devices |
| LO03 | Evaluates authentication, authorization, and data privacy mechanisms |
| LO04 | Proposes fundamental protection approaches for IoT security |
Relation with Program Learning Outcome
| Order | Type | Program Learning Outcomes | Level |
|---|---|---|---|
| PLO01 | Bilgi - Kuramsal, Olgusal | On the basis of the competencies gained at the undergraduate level, it has an advanced level of knowledge and understanding that provides the basis for original studies in the field of Computer Engineering. | |
| PLO02 | Bilgi - Kuramsal, Olgusal | By reaching scientific knowledge in the field of engineering, he/she reaches the knowledge in depth and depth, evaluates, interprets and applies the information. | |
| PLO03 | Yetkinlikler - Öğrenme Yetkinliği | Being aware of the new and developing practices of his / her profession and examining and learning when necessary. | |
| PLO04 | Yetkinlikler - Öğrenme Yetkinliği | Constructs engineering problems, develops methods to solve them and applies innovative methods in solutions. | 3 |
| PLO05 | Yetkinlikler - Öğrenme Yetkinliği | Designs and applies analytical, modeling and experimental based researches, analyzes and interprets complex situations encountered in this process. | |
| PLO06 | Yetkinlikler - Öğrenme Yetkinliği | Develops new and / or original ideas and methods, develops innovative solutions in system, part or process design. | |
| PLO07 | Beceriler - Bilişsel, Uygulamalı | Has the skills of learning. | |
| PLO08 | Beceriler - Bilişsel, Uygulamalı | Being aware of new and emerging applications of Computer Engineering examines and learns them if necessary. | 4 |
| PLO09 | Beceriler - Bilişsel, Uygulamalı | Transmits the processes and results of their studies in written or oral form in the national and international environments outside or outside the field of Computer Engineering. | |
| PLO10 | Beceriler - Bilişsel, Uygulamalı | Has comprehensive knowledge about current techniques and methods and their limitations in Computer Engineering. | 3 |
| PLO11 | Beceriler - Bilişsel, Uygulamalı | Uses information and communication technologies at an advanced level interactively with computer software required by Computer Engineering. | |
| PLO12 | Bilgi - Kuramsal, Olgusal | Observes social, scientific and ethical values in all professional activities. | 3 |
Week Plan
| Week | Topic | Preparation | Methods |
|---|---|---|---|
| 1 | Introduction to IoT Security and Privacy | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 2 | IoT Threat Model and Attack Surface | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 3 | IoT Device Security | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 4 | Security Constraints in Embedded Systems | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 5 | Security in Wireless IoT Networks | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 6 | IEEE 802.15.4 Security | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 7 | Security Issues in 6LoWPAN and RPL | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 8 | Mid-Term Exam | Ölçme Yöntemleri: Yazılı Sınav |
|
| 9 | CoAP ve MQTT Güvenliği | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 10 | Kimlik Doğrulama ve Yetkilendirme | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 11 | Data Privacy and Encryption | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 12 | IoT Privacy and Personal Data Risks | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 13 | IoT Botnets and DDoS Attacks | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 14 | Firmware Security and Secure Updates | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 15 | IoT Security Standards and Case Studies | Read the relevant section of the lecture notes | Öğretim Yöntemleri: Anlatım |
| 16 | Term Exams | Ölçme Yöntemleri: Yazılı Sınav |
|
| 17 | Term Exams | Ölçme Yöntemleri: Yazılı Sınav |
Student Workload - ECTS
| Works | Number | Time (Hour) | Workload (Hour) |
|---|---|---|---|
| Course Related Works | |||
| Class Time (Exam weeks are excluded) | 14 | 3 | 42 |
| Out of Class Study (Preliminary Work, Practice) | 14 | 5 | 70 |
| Assesment Related Works | |||
| Homeworks, Projects, Others | 0 | 0 | 0 |
| Mid-term Exams (Written, Oral, etc.) | 1 | 15 | 15 |
| Final Exam | 1 | 30 | 30 |
| Total Workload (Hour) | 157 | ||
| Total Workload / 25 (h) | 6,28 | ||
| ECTS | 6 ECTS | ||