雲端與物聯網安全

臺北科技大學 115-1 學期課程，課號 364549。

課程大綱

雲端(Cloud)與物聯網(Internet of Things, IoT)重塑了整個計算世界對於事物的運行方式。除了為各行業提出了新的前沿應用外，也衍生更多在兩者融合對於管理、資訊安全與隱私保護等不得不重視的課題。本課程主要討論雲端與物聯網相關的安全性問題，包括由物聯網衍生出來的新威脅、弱點及兩者融合的相關安全議題。引領學生具備發展雲端與物聯網安全的重要觀念與技術，進而可以分析、設計與規劃未來物聯網與雲端運算融合之應用、與安全管理。 Cloud and the Internet of Things (IoT) have reshaped the way things are performed across the computing world. In addition to proposing new cutting-edge applications for various industries, there are also more issues that must be paid attention to in the integration of the two, such as management, information security and privacy protection. This course mainly discusses the security issues related to cloud and the IoT, including new threats and weaknesses derived when the two technologies converge. To lead students to understand important concepts and technologies for cloud and IoT security, and then to able to analyze, design, plan application and implement security management of the integration of the cloud and IoT.

課程進度

1. 課程說明與物聯網與雲端安全概論(IoT & Cloud Security) 2. 物聯網應用之安全議題(IoT Information Security Issues) 3. 物聯網資安技術實務(IoT Network Technology and Security) 4. 物聯網網路架構與安全(IoT Network Framework and Cloud Security) 5. AIoT 應用安全-智慧鐵道應用(AIoT Application Security - Smart Railway Applications) 6. 雲端之觀念、架構與設計 (Cloud Concepts, Architecture, and Design) 7. 雲端資料安全(Cloud Data Security) 8. 雲端平台及基礎設施安全(Cloud Platform and Infrastructure Security) 9. 物聯網伺服器與雲端安全(IoT Server & Cloud Security) 10. 雲端應用程式安全(Cloud Application Security) 11. 雲端服務平台資安實務(Cloud Service Provider Security) 12. 物聯網與雲端安全管理議題 (IoT & Cloud Security Management Issues) 13. 物聯網與雲端安全雲端安全標準(IoT & Cloud Security Standard) 14. 智慧鐵道-AIoT 實務案例(Smart Railway - AIoT Practical Case Studies) 15. 智慧鐵道及相關資安規範(Smart Railway and Related Information Security Standards) 16. 物聯網與雲端應用安全案例研討(IoT/AIoT/Cloud Security Project)(1) 17. 物聯網與雲端應用安全案例研討(IoT/AIoT/Cloud Security Project)(2) 18. 物聯網與雲端應用安全案例研討(IoT/AIoT/Cloud Security Project)(3)

評量方式

課程評分 指定練習(Assigned exercises)：20% 期中考(Midterm exam)：40% 期末專題研討(Final Project)：40%

教材

【遵守智慧財產權觀念，請使用正版教科書，不得使用非法影印教科書】 使用外文原文書：否 ETSI EN 303 645, https://www.etsi.org/deliver/etsi_en/303600_303699/303645/02.01.01_60/en_303645v020101p.pdf Cybersecurity Certification Test Plan for IoT Devices, https://ctiacertification.org/wp-content/uploads/2020/10/CTIA-Cybersecurity-Test-Plan-1.2.2.pdf CCSK, https://exams.cloudsecurityalliance.org/en